burpsuite-project-parser
SolidUse when asked to search or analyze a Burp Suite .burp project to extract audit items, inspect request or response metadata, or search captured traffic. Reads through Burp Suite Professional headless JAR, preflights result size, and returns size-checked JSON with truncated body fields. Findings are indicators requiring validation.
Install
Quality Score: 83/100
Skill Content
Details
- Author
- OutlineDriven
- Repository
- OutlineDriven/outline-driven-development
- Created
- 9 months ago
- Last Updated
- 5 days ago
- Language
- Python
- License
- Apache-2.0
Similar Skills
Semantically similar based on skill content — not just same category
burp-search-command
Use when a human invokes the Burp search command with a required .burp project file and optional parser operation. Runs the Burp Suite project parser wrapper and returns JSON search results. Not for source or remote-system changes.
js-analysis
Analyze JavaScript files (from Burp/proxy history, a URL list, or a recon JS dump) for security-relevant intel — hidden admin/internal/debug/test API endpoints, hidden parameters (debug/test/admin/role/bypass flags), hardcoded secrets (API keys, tokens, passwords, private keys), feature flags that unlock hidden functionality, dangerous developer comments, and client-side auth/authz logic. Extracts, categorizes, prioritizes by exploitability, emits ready-to-fire validation requests (Burp Repeater / curl), and writes a findings report. Use when a target's front end ships JS bundles and you want to mine them for attack surface. Never reports a secret or endpoint without a live test first.
burp-suite-testing
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.