skills.rest
langbyyi
langbyyiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

burp-mcp-vuln-check

Verify web vulnerabilities via Burp MCP proxy history and HTTP replay.

96|1|Updated Jun 4, 2026
Search Tags:#web-security#sql-injection#ssrf#idor#vulnerability-verification#burp-mcp#mini-program-audit
One-click install
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill burp-mcp-vuln-check
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: burp-mcp-vuln-check
Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/burp-mcp-vuln-check
Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill burp-mcp-vuln-check

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill eliminates the risk of false positives and destructive payloads during web vulnerability verification by enforcing a methodical, low-impact testing workflow using Burp MCP proxy history, ensuring authorized security testers can safely triage and confirm vulnerabilities without mass scanning.

Core Features & Use Cases

  • Methodical Differential Verification: Enforces single-variable mutation and two independent indicator confirmation to reduce false positives for common web vulnerabilities like path traversal, SSRF, SQLi, and IDOR.
  • WeChat Mini Program Preflight: Automatically enumerates hosts and scans for session_key leaks in mini program Burp history before pursuing other vulnerability classes, preventing missed critical findings.
  • Article-Derived Check Support: Includes a structured template to extract vulnerability details from writeups and craft targeted, safe probes for specific disclosed issues. Use Case: A bug bounty hunter reviewing Burp proxy history for a target domain can use this Skill to safely verify potential vulnerabilities, confirm WeChat mini program session leaks, and generate structured, auditable evidence for valid reports.

Quick Start

Use this Skill to verify low-impact web vulnerabilities from your Burp proxy history by replaying baseline requests, mutating single variables, and comparing differential response evidence to confirm findings.

Frequently Asked Questions about burp-mcp-vuln-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify web vulnerabilities in Burp proxy history without causing destructive impact?▼

To verify web vulnerabilities safely, use methodical differential testing by replaying baseline requests and applying single-variable mutations to confirm findings without mass scanning. This approach enforces low-impact testing using Burp proxy history.

How can I check for WeChat mini program session_key leaks in Burp history?▼

Check for WeChat mini program session_key leaks by automatically enumerating hosts and scanning Burp proxy history. This preflight step prevents missing critical findings before pursuing other web vulnerability classes.

What is the best way to reduce false positives when testing for SSRF and SQLi vulnerabilities?▼

The best way to reduce false positives for SSRF and SQLi is enforcing single-variable mutation and confirming two independent indicators. This differential evidence collection ensures vulnerabilities are valid before reporting.

Can I test path traversal and IDOR vulnerabilities using HTTP replay with Burp MCP?▼

Yes, you can test path traversal and IDOR using Burp MCP HTTP replay. It supports methodical verification of common web vulnerability classes by comparing differential response evidence from replayed baseline requests.

How do I safely verify vulnerabilities from writeups against my own target domain?▼

Safely verify writeup-derived vulnerabilities by extracting details using a structured template to craft targeted, safe probes. This allows specific disclosed issues to be checked against your target without destructive payloads.

Does Burp MCP support blind OOB detection for authorized security testing?▼

Yes, Burp MCP supports blind OOB detection via Burp Collaborator for authorized security testing. It enables structured evidence formatting and conservative reporting required for auditable security engagements.

Related Skills

Explore More Software Engineering Skills→
six2dezsix2dez
1.4k

burp-scan

Coordinate Burp Suite scans via MCP for vulnerability identification.

Community
Advanced
daishimandaishiman
6

security-reporting

Generate standardized security diagnostic reports from vulnerability findings.

Community
Intermediate
Ramprasad4121Ramprasad4121
1

burpsuite-project-parser

Search and extract data from Burp Suite project files via command line.

Community
Intermediate
ano4lano4l

security-pen-testing

Identify vulnerabilities in web applications, APIs, and infrastructure through authorized offensive security testing.

Community
Advanced