21 skills · sorted by relevance
Test web application security with Burp Suite by capturing, modifying, and replaying browser requests. Learn to define testing scope, compare responses, investigate weaknesses manually, and review automated scan findings in Professional Edition.
レッドストーンリピーターの向き(facing)、遅延(delay)、connects配置の仕様。repeater使用時に必ず読む。
The English summary is being prepared. Showing the original description.
Investigate API requests that fail to replay because of client-generated signatures or anti-bot tokens. Start with captured traffic, identify the blocking inputs or signing function, and validate a reproducible request for further security testing.
Capture a Burp Suite Repeater request/response as a PoC image (targets/<eng>/poc/) by driving the Burp MCP + the Kali GUI. Replays a request in a Repeater tab, sends it, and grabs the request+response panes - a Burp-native PoC (client report / CTF writeup). Use when you want the evidence to come from Burp rather than a curl/terminal card, or whenever you drive a target through Burp and need the images. Pairs with hunt-burp.
The English summary is being prepared. Showing the original description.
MLX↔JAX bidirectional beacon-repeater with spectral gap random walk, justfile orchestration, catp flow validation, and adversarial malleability for life pattern resurrection.
The English summary is being prepared. Showing the original description.
Master Burp Suite Professional for comprehensive web application security testing. Use this skill when performing manual web application assessments with Burp Suite including proxy interception, Scanner automation, Intruder attacks, Repeater analysis, and extension integration. Covers advanced techniques like match-and-replace rules, macro authentication, Collaborator for OOB testing, and Turbo Intruder for high-speed fuzzing.
The English summary is being prepared. Showing the original description.
Prepare screenshots and network traffic records for bug bounty submissions by masking session secrets and personal data while preserving useful verification details. The skill covers capture setup, HAR cleanup, evidence filenames, and credential handling after submission.
Inspect NTLM authentication responses from public IIS, SharePoint, and Exchange services to identify exposed internal domains, server names, and timestamps. Assess the disclosure in context and prepare reproducible evidence without completing authentication.
Investigate CSRF, where a page causes unwanted actions through a signed-in user's session. The skill covers tokens, cookie settings, JSON APIs, and account linking, with guidance for browser-based demonstrations and assessing account or financial impact.
Test for race conditions, where simultaneous requests disrupt expected processing order. Investigate duplicate redemptions, balance or vote changes, and authentication or request-limit failures, then verify actual effects and record reproducibility.
Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send, OOB-gate blind bugs with Collaborator, fuzz via Intruder (RoE-safe), then hand off to the matching vuln-class hunt. Wiki-first, FIND schema output.
The English summary is being prepared. Showing the original description.
Exposes Advanced Custom Fields data through the WordPress REST API using register_rest_field and acf_format_value. Handles repeater fields, flexible content layouts, and gallery fields with proper serialization.
The English summary is being prepared. Showing the original description.
Converts Advanced Custom Fields field groups into native Gutenberg blocks using the ACF Block API v2 and @wordpress/scripts build pipeline. Maps ACF repeaters, groups, and flexible content to InnerBlocks and block attributes with server-side rendering via acf_register_block_type().
The English summary is being prepared. Showing the original description.
Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
The English summary is being prepared. Showing the original description.
Detect and exploit session fixation (WSTG-SESS-01, WSTG-SESS-03) and session exposure (WSTG-SESS-04) by testing whether the server issues a new session token post-authentication, whether pre-login tokens remain valid after login, and whether session IDs are transmitted over HTTP or included in GET parameters. Analyze token randomness via Burp Sequencer. Test JSESSIONID, ASP.NET Forms Auth cookies. Tools: OWASP ZAP, Burp Suite Repeater/Sequencer, JHijack.
The English summary is being prepared. Showing the original description.
Audit and attack session cookies via missing Secure/HttpOnly/SameSite attributes, overly broad Domain/Path scope, non-expiring persistent cookies, absent __Host- and __Secure- prefixes, browser cache leakage (Cache-Control: no-store missing), session token predictability via Burp Sequencer analysis, server-side session not invalidated on logout, and SSO single-logout bypass. Tools: Burp Suite Repeater/Sequencer, OWASP ZAP, EditThisCookie, Tamper Data, Cookiebro.
The English summary is being prepared. Showing the original description.
リピーターロックの論理、構成方法、および使用に関するガイドラインです。
The English summary is being prepared. Showing the original description.
リピーターを用いた信号の延長、遅延（0.1秒〜0.4秒）、およびタイミング調整の技術に関するガイドラインです。
The English summary is being prepared. Showing the original description.
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
The English summary is being prepared. Showing the original description.
Windows アプリ開発 (WinUI 3 / Windows App SDK) のコントロール API リファレンス。 Microsoft.UI.Xaml.Controls。Button, CheckBox, RadioButtons, ToggleSwitch, Slider, TextBox, RichEditBox, AutoSuggestBox, NumberBox, ListView, GridView, ItemsView, ItemsRepeater, TreeView, ComboBox, NavigationView, TabView, Frame, SplitView, BreadcrumbBar, ContentDialog, Flyout, CommandBar, TeachingTip, InfoBar, MediaPlayerElement, WebView2, CalendarView, DatePicker, ColorPicker, TitleBar。
The English summary is being prepared. Showing the original description.
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
The English summary is being prepared. Showing the original description.