Automate web application security scanning through Burp Suite's extension API.
npx skills add https://github.com/enderphan94/pentest-kit --skill burp-scan-enderphan94
Please help me install this Agent Skill. Skill: burp-scan Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/burp-scan Command: npx skills add https://github.com/enderphan94/pentest-kit --skill burp-scan-enderphan94
This Skill streamlines the process of assessing web application security by leveraging Burp Suite's capabilities through an automated pipeline.
Run the burp-scan skill on a configured environment with Burp Suite running and enabled, then review the generated report for detailed vulnerabilities discovered.
High-intent search queries and answers about installing and using this skill.
Automate web application security assessments by running this Skill to gather passive issues from Burp Suite proxy history and actively probe target URLs through the HTTP engine. It automatically detects installed extensions and edition, then produces structured vulnerability findings for triage.
Yes, you can expand active scan coverage by integrating BApp extensions like Turbo Intruder and Param Miner. The Skill enhances extended scanning by interacting with these installed extensions through the Burp Suite extension API to broaden vulnerability testing.
Out-of-band testing verifies SSRF vulnerabilities by using Burp Collaborator to monitor external interactions. The Skill leverages this mechanism to confirm vulnerabilities that are blind or require external server callbacks to validate exploitation during active probing.
Burp Suite Community edition works, but the Skill automatically detects whether you are using Pro or Community. It adapts its capability detection accordingly, allowing automated assessment and structured report generation based on the installed edition and available extensions.
Generate structured security findings by running the Skill to automate passive and active scans, integrating BApp extensions and Collaborator for OOB testing. It produces structured vulnerability reports suitable for triage and remediation directly from Burp Suite's HTTP engine.
jcastillotxIntercept and analyze HTTP traffic with Burp Suite proxy tools.
jinyimeng01Validate suspected web vulnerabilities and generate structured exploit reports.
dreadnodeAutomate Burp Suite Professional security testing via its MCP server.
amano--Intercept HTTP traffic and test web applications for security vulnerabilities.
