Test web application security with Burp Suite by capturing, modifying, and replaying browser requests. Learn to define testing scope, compare responses, investigate weaknesses manually, and review automated scan findings in Professional Edition.
中文简介正在准备中。当前显示英语简介。
- Setting up a proxy to inspect web traffic
- Replaying modified requests with Repeater
- Checking access controls and pricing logic
zebbern/claude-code-guide☆ 46772026年10月21日 更新
レッドストーンリピーターの向き(facing)、遅延(delay)、connects配置の仕様。repeater使用時に必ず読む。
中文简介正在准备中。当前显示原文说明。
yadokari1130/MC-Redstone-AI☆ 62026年8月23日 更新
Investigate API requests that fail to replay because of client-generated signatures or anti-bot tokens. Start with captured traffic, identify the blocking inputs or signing function, and validate a reproducible request for further security testing.
中文简介正在准备中。当前显示英语简介。
- Investigate signature errors in replayed API requests
- Trace signing functions and their inputs
- Validate a reproduced signer against browser output
awarexone/Agentic-Bug-Hunter☆ 53862026年10月10日 更新
Capture a Burp Suite Repeater request/response as a PoC image (targets/<eng>/poc/) by driving the Burp MCP + the Kali GUI. Replays a request in a Repeater tab, sends it, and grabs the request+response panes - a Burp-native PoC (client report / CTF writeup). Use when you want the evidence to come from Burp rather than a curl/terminal card, or whenever you drive a target through Burp and need the images. Pairs with hunt-burp.
中文简介正在准备中。当前显示原文说明。
Encod3d-Sec/TORCH☆ 3332026年9月1日 更新
MLX↔JAX bidirectional beacon-repeater with spectral gap random walk, justfile orchestration, catp flow validation, and adversarial malleability for life pattern resurrection.
中文简介正在准备中。当前显示原文说明。
plurigrid/asi☆ 702026年7月10日 更新
Master Burp Suite Professional for comprehensive web application security testing. Use this skill when performing manual web application assessments with Burp Suite including proxy interception, Scanner automation, Intruder attacks, Repeater analysis, and extension integration. Covers advanced techniques like match-and-replace rules, macro authentication, Collaborator for OOB testing, and Turbo Intruder for high-speed fuzzing.
中文简介正在准备中。当前显示原文说明。
ShulkwiSEC/bb-huge☆ 232026年7月11日 更新
Inspect NTLM authentication responses from public IIS, SharePoint, and Exchange services to identify exposed internal domains, server names, and timestamps. Assess the disclosure in context and prepare reproducible evidence without completing authentication.
中文简介正在准备中。当前显示英语简介。
- Checking public services that advertise NTLM authentication
- Extracting internal domains and server names from responses
- Assessing the impact of exposed Active Directory structure
elementalsouls/Claude-BugHunter☆ 51992026年10月20日 更新
Prepare screenshots and network traffic records for bug bounty submissions by masking session secrets and personal data while preserving useful verification details. The skill covers capture setup, HAR cleanup, evidence filenames, and credential handling after submission.
中文简介正在准备中。当前显示英语简介。
- Masking secrets in evidence screenshots
- Cleaning HAR files before submission
- Capturing evidence in Burp Suite and Chrome DevTools
elementalsouls/Claude-BugHunter☆ 51992026年10月20日 更新
Investigate CSRF, where a page causes unwanted actions through a signed-in user's session. The skill covers tokens, cookie settings, JSON APIs, and account linking, with guidance for browser-based demonstrations and assessing account or financial impact.
中文简介正在准备中。当前显示英语简介。
- Review CSRF protection for email changes and payments
- Check whether JSON APIs accept cross-origin form submissions
- Inspect external account linking for unwanted associations
elementalsouls/Claude-BugHunter☆ 51992026年10月20日 更新
Test for race conditions, where simultaneous requests disrupt expected processing order. Investigate duplicate redemptions, balance or vote changes, and authentication or request-limit failures, then verify actual effects and record reproducibility.
中文简介正在准备中。当前显示英语简介。
- Check coupons and gift cards for duplicate redemption
- Test balance updates and voting limits under concurrent requests
- Investigate timing flaws in authentication and account creation
elementalsouls/Claude-BugHunter☆ 51992026年10月20日 更新
Drive Burp Suite over its MCP server as an AI triage + attack layer - review proxy history for signals, replay via Repeater/send, OOB-gate blind bugs with Collaborator, fuzz via Intruder (RoE-safe), then hand off to the matching vuln-class hunt. Wiki-first, FIND schema output.
中文简介正在准备中。当前显示原文说明。
Encod3d-Sec/TORCH☆ 3332026年9月1日 更新
Converts Advanced Custom Fields field groups into native Gutenberg blocks using the ACF Block API v2 and @wordpress/scripts build pipeline. Maps ACF repeaters, groups, and flexible content to InnerBlocks and block attributes with server-side rendering via acf_register_block_type().
中文简介正在准备中。当前显示原文说明。
agentskillexchange/skills☆ 552026年10月22日 更新
Exposes Advanced Custom Fields data through the WordPress REST API using register_rest_field and acf_format_value. Handles repeater fields, flexible content layouts, and gallery fields with proper serialization.
中文简介正在准备中。当前显示原文说明。
agentskillexchange/skills☆ 552026年10月22日 更新
Identifying and validating cross-site scripting vulnerabilities using Burp Suite's scanner, intruder, and repeater tools during authorized security assessments.
中文简介正在准备中。当前显示原文说明。
galyarderlabs/galyarder-framework☆ 272026年10月11日 更新
Detect and exploit session fixation (WSTG-SESS-01, WSTG-SESS-03) and session exposure (WSTG-SESS-04) by testing whether the server issues a new session token post-authentication, whether pre-login tokens remain valid after login, and whether session IDs are transmitted over HTTP or included in GET parameters. Analyze token randomness via Burp Sequencer. Test JSESSIONID, ASP.NET Forms Auth cookies. Tools: OWASP ZAP, Burp Suite Repeater/Sequencer, JHijack.
中文简介正在准备中。当前显示原文说明。
ShulkwiSEC/bb-huge☆ 232026年7月11日 更新
Audit and attack session cookies via missing Secure/HttpOnly/SameSite attributes, overly broad Domain/Path scope, non-expiring persistent cookies, absent __Host- and __Secure- prefixes, browser cache leakage (Cache-Control: no-store missing), session token predictability via Burp Sequencer analysis, server-side session not invalidated on logout, and SSO single-logout bypass. Tools: Burp Suite Repeater/Sequencer, OWASP ZAP, EditThisCookie, Tamper Data, Cookiebro.
中文简介正在准备中。当前显示原文说明。
ShulkwiSEC/bb-huge☆ 232026年7月11日 更新
リピーターロックの論理、構成方法、および使用に関するガイドラインです。
中文简介正在准备中。当前显示原文说明。
yadokari1130/MC-Redstone-AI☆ 62026年8月23日 更新
リピーターを用いた信号の延長、遅延(0.1秒〜0.4秒)、およびタイミング調整の技術に関するガイドラインです。
中文简介正在准备中。当前显示原文说明。
yadokari1130/MC-Redstone-AI☆ 62026年8月23日 更新
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
中文简介正在准备中。当前显示原文说明。
AxelMrak/ai☆ 52026年2月20日 更新
Windows アプリ開発 (WinUI 3 / Windows App SDK) のコントロール API リファレンス。 Microsoft.UI.Xaml.Controls。Button, CheckBox, RadioButtons, ToggleSwitch, Slider, TextBox, RichEditBox, AutoSuggestBox, NumberBox, ListView, GridView, ItemsView, ItemsRepeater, TreeView, ComboBox, NavigationView, TabView, Frame, SplitView, BreadcrumbBar, ContentDialog, Flyout, CommandBar, TeachingTip, InfoBar, MediaPlayerElement, WebView2, CalendarView, DatePicker, ColorPicker, TitleBar。
中文简介正在准备中。当前显示原文说明。
Fandhe-AI/agent-reference-skills☆ 42026年10月20日 更新
This skill should be used when the user asks to "intercept HTTP traffic", "modify web requests", "use Burp Suite for testing", "perform web vulnerability scanning", "test with Burp Repeater", "analyze HTTP history", or "configure proxy for web testing". It provides comprehensive guidance for using Burp Suite's core features for web application security testing.
中文简介正在准备中。当前显示原文说明。
danstrem2/clawdbot-skill-master-pack☆ 22026年2月1日 更新