Skip to main content
affpapa.org
RU EN
skill

burp-suite-testing — Claude Code skill: what it does, how to install

Guides web security testing workflows using Burp Suite proxy interception, request modification, and repeater analysis.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --skill security/burp-suite-testing
Open on GitHub

What burp-suite-testing does

This skill teaches Claude Code how to interact with Burp Suite during web assessments. It covers configuring the proxy listener on 127.0.0.1:8080, firing up the integrated browser, and setting target scope boundaries to filter out unnecessary network requests.

The instructions walk through manual request crafting with Repeater, fuzzing parameters via Intruder, and reviewing HTTP history logs. Without an installed Burp Suite desktop application and an imported CA certificate, HTTPS traffic interception will fail.

What it helps with

  • capture and inspect browser HTTP traffic through the local proxy
  • isolate assessment targets from background web requests using Target Scope
  • reissue modified parameters using Burp Repeater
  • run automated vulnerability scans in Burp Suite Professional

Example prompts for the agent

  • Help me configure Burp Suite to intercept traffic from the embedded browser
  • How do I isolate target URLs in the Burp Suite site map?
  • Show me how to test input fields for logic errors in Burp Repeater

How to install burp-suite-testing

1claude-code-templates

npx claude-code-templates@latest --skill security/burp-suite-testing

2Skills CLI (Vercel)

npx skills add davila7/claude-code-templates --skill burp-suite-testing -a claude-code

3Manually: put the files in place

~/.claude/skills/burp-suite-testing/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/burp-suite-testing/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about burp-suite-testing

How do I install burp-suite-testing in Claude Code?

Run npx claude-code-templates@latest --skill security/burp-suite-testing in your terminal. You can also place the file directly at ~/.claude/skills/burp-suite-testing/SKILL.md.

What does burp-suite-testing do?

It provides step-by-step guidance for testing web applications with Burp Suite. It explains proxy interception, Repeater workflows, scope configuration, and automated scanning modes.

Is Burp Suite Professional required?

No, basic features like the proxy and Repeater work in the free Community edition. Burp Suite Professional is required if you want automated vulnerability scanning and unlimited Intruder attacks.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set804

The whole set →
sync-conflict-resolver Resolves data synchronization discrepancies in files like .sync-state.json. Useful for automated field-level merging and conflict error log reviews. 135installs data-processing-ray-data A Claude skill that tells the agent how to process large datasets with Ray Data: streaming, GPU transforms, batch inference. 134installs svelte-debug Reads a Svelte or SvelteKit error and stack trace, finds whether the cause is compilation, runtime or config, and hands you a fix. 134installs publisher-medium Turns a blog post from markdown, PDF or a URL into HTML you can paste into Medium, with markers showing where images go. 134installs paper-2-web Turns an academic paper in LaTeX or PDF into an interactive homepage, a conference poster and a presentation video. Handy before a talk or when promoting a preprint. 133installs task-from-pr Turns a GitHub pull request into a Linear task, with a size estimate, team assignment and links running both ways. 133installs bidirectional-sync Sets up two-way synchronization between GitHub Issues and Linear tasks. Handles update conflicts and tracks state in local JSON files. 133installs performance-profiling A Claude skill that keeps the agent on a fixed loop: measure, find the bottleneck, change one thing, confirm the result. Useful when a page drags. 132installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor