Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows.
SkillScore95Maintained
Automatic
◆Security & AppSec pack
Last verified 8/28/2026
What it changes
Passed 21 of 22 test cases with the skill, and 20 of 22 without it.
Without skill91%
With skill95%
Checks it passed that the model alone missed
Specifies the macOS shortcut Cmd+T
1 fixed20 passed either way1 still failing0 broke
Pass-rate lift
+5 pp
Tokens
+249%
Agent turns
0%
Response time
-9%
Model gemini-3.6-flashMeasured 8/28/2026v121 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
A test case the skill fixed. Same model, same prompt, with and without the skill.
Prompt
A tester on macOS wants to toggle Burp Proxy's interception status on and off rapidly using keyboard commands. What is the keyboard shortcut for toggling intercept on macOS?
What was checked, without and with the skill
Checked
Without skill
With skill
Specifies the macOS shortcut Cmd+T
Missed
Passed
case-11 · gemini-3.6-flash · 8/28/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md377 linessingle file
AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
Burp Suite Web Application Testing
Purpose
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows. This skill enables systematic discovery and exploitation of web application vulnerabilities through proxy-based testing methodology.
Inputs / Prerequisites
Required Tools
Burp Suite Community or Professional Edition installed
Burp's embedded browser or configured external browser
Target web application URL
Valid credentials for authenticated testing (if applicable)
Environment Setup
Burp Suite launched with temporary or named project
Proxy listener active on 127.0.0.1:8080 (default)
Browser configured to use Burp proxy (or use Burp's browser)
CA certificate installed for HTTPS interception
Editions Comparison
Feature
Community
Professional
Proxy
✓
✓
Repeater
✓
✓
Intruder
Limited
Full
Scanner
✗
✓
Extensions
✓
✓
Outputs / Deliverables
Primary Outputs
Intercepted and modified HTTP requests/responses
Vulnerability scan reports with remediation advice
HTTP history and site map documentation
Proof-of-concept exploits for identified vulnerabilities