securityby shadd0wtaka
burpsuite
shadd0wtaka/burpsuite
BurpSuite Integration
What it changes
Passed 18 of 22 test cases with the skill, and 4 of 22 without it.
Without skill18%
With skill82%
Checks it passed that the model alone missed
- References burpsuite
- Uses binary deep-recon
- Uses await with __init__
and 17 more in the full report
15 fixed3 passed either way3 still failing1 broke
- Pass-rate lift
- +64 pp
- Tokens
- -36%
- Agent turns
- 0%
- Response time
- -45%
Model gemini-3.6-flashMeasured 8/20/2026v118 of 22 cases passed with skill
See it in action
One of 15 test cases the skill fixed. Same model, same prompt, with and without the skill.
PromptProvide the terminal execution command for deep recon using the default target example.com.
What was checked, without and with the skill| Checked | Without skill | With skill |
|---|
| Uses binary deep-recon | Missed | Passed |
|---|
What's inside
The instructions your model reads when the skill loads.
SKILL.md43 linessingle file
burpsuite
BurpSuite Integration
Category: scanning — Web Application Testing
Overview
BurpSuite Integration
Usage in Zen-Ai-Pentest
from tools.burpsuite_integration import BurpSuiteAPI
async def main():
tool = BurpSuiteAPI()
result = await tool.__init__("target.com")
print(result)
from tools.burpsuite_integration import BurpSuiteHeadless
async def main():
tool = BurpSuiteHeadless()
result = await tool.__init__("target.com")
print(result)
CLI Equivalent
burpsuite --help
Agent Integration
- CLI:
deep-recon --tool burpsuite_integration --target example.com
Track record
Benchmark
18 / 22
test cases passed, vs 4 / 22 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
ImportedLicense MITImported 8/3/2026Version v1