Agent skill · security · davila7
Burp Suite Web Application Testing
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
Why this skill is useful
Provides detailed workflows and commands for using Burp Suite to perform web application security testing, which the AI wouldn't reliably generate on its own.
What it needs
Requires burp-suite installed locally. About 6k tokens when loaded. Last updated 2026-08-06. 30,138 stars on the source repository.
What this skill does
Burp Suite Web Application Testing Purpose Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology. Inputs / Prerequisites Required Tools Burp Suite Community or Professional Edition installed Burp's embedded browser or configured external browser Target web application URL Valid credentials for authenticated testing (if applicable) Environment Setup Burp Suite launched with temporary or named project Proxy listener active on 127.0.0.1:8080 (default) Browser configured to use Burp proxy (or use Burp's browser) CA certificate installed for HTTPS interception Editions Comparison Feature Community Professional --------- ----------- -------------- Proxy ✓ ✓ Repeater ✓ ✓ Intruder Limited Full Scanner ✗ ✓ Extensions ✓ ✓ Outputs / Deliverables Primary Outputs Intercepted and modified HTTP requests/responses Vulnerability scan reports with remediation advice HTTP history and site map documentation Proof-of-concept exploits for identified vulnerabilities Core Workflow Phase 1: Intercepting HTTP Traffic Launch Burp's Browser Navigate to integrated browser for seamless proxy integration: 1. Open Burp Suite and create/open project 2. Go to Proxy > Intercept tab 3. Click Open Browser to launch preconfigured browser 4. Position windows to view both Burp and browser simultaneously Configure Interception Control which requests are captured: Intercept and Forward Requests Process intercepted traffic: 1. Set intercept toggle to Intercept on 2. Navigate to target URL in browser 3. Observe request held in Proxy > Intercept tab 4. Review request contents (headers, parameters, body) 5. Click Forward to send request to server 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills davila7/burp-suite-testing