# burp-suite-testing

Guides web security testing workflows using Burp Suite proxy interception, request modification, and repeater analysis.

- skill · `type=skill` · Claude Code · 133 installs
- Author: zebbern
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/burp-suite-testing
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/skills/burp-suite-testing

## What it does

This skill teaches Claude Code how to interact with Burp Suite during web assessments. It covers configuring the proxy listener on `127.0.0.1:8080`, firing up the integrated browser, and setting target scope boundaries to filter out unnecessary network requests.

The instructions walk through manual request crafting with Repeater, fuzzing parameters via Intruder, and reviewing HTTP history logs. Without an installed Burp Suite desktop application and an imported CA certificate, HTTPS traffic interception will fail.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --skill security/burp-suite-testing
```

2. **Skills CLI (Vercel)**
```bash
npx skills add davila7/claude-code-templates --skill burp-suite-testing -a claude-code
```

3. **Manually: put the files in place**
- File: `~/.claude/skills/burp-suite-testing/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/burp-suite-testing/

### Codex

**Manually: put the files in place**
- File: `.agents/skills/burp-suite-testing/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

**Manually: put the files in place**
- File: `.cursor/skills/burp-suite-testing/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install davila7/claude-code-templates burp-suite-testing
```

2. **Manually: put the files in place**
- File: `.github/skills/burp-suite-testing/SKILL.md`

### Gemini CLI

**Platform CLI**
```bash
gemini skills install https://github.com/davila7/claude-code-templates --path cli-tool/components/skills/security/burp-suite-testing
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/burp-suite-testing/SKILL.md` — The legacy .windsurf/skills/ path still works

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/skills/security/burp-suite-testing

## When to use it
- capture and inspect browser HTTP traffic through the local proxy
- isolate assessment targets from background web requests using Target Scope
- reissue modified parameters using Burp Repeater
- run automated vulnerability scans in Burp Suite Professional

## Example prompts
- Help me configure Burp Suite to intercept traffic from the embedded browser
- How do I isolate target URLs in the Burp Suite site map?
- Show me how to test input fields for logic errors in Burp Repeater

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 804 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md