Download

Skill UI

Browse and discover 6011+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Burp-Suite , found 22 results

Default Newest Most Downloaded

Template Injection Exploitation

exploiting-template-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guide for penetration testers on finding SSTI injection points, identifying template engines, and executing RCE using tools like Burp Suite, tplmap, and curl on Jinja2, Twig, Freemarker, and other engines.

WebSocket Security Testing

exploiting-websocket-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration tests through discovering WebSocket endpoints, validating authentication, checking CSWSH protections, and fuzzing message handlers with tools like Burp Suite, wscat, websocat, and Python scripts for real-time apps.

Intercept Mobile Traffic

intercepting-mobile-traffic-with-burpsuite

mukul975/Anthropic-Cybersecurity-Skills

Intercept and analyze mobile app HTTP/HTTPS traffic with Burp Suite to expose insecure APIs, authentication flaws, data leaks, and server vulnerabilities during penetration tests or API security assessments.

CSRF Attack Simulation Guide

performing-csrf-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step workflow for authorized penetration testers to discover and validate CSRF weaknesses, covering request enumeration, anti-CSRF verification, SameSite/header controls, Burp Suite PoC generation, and advanced payload crafting to protect sensitive operations.

Thick Client Pentest Guide

performing-thick-client-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Performs thick client desktop application pentests by analyzing local storage, binaries, memory, and API traffic with dnSpy, Procmon, Burp Suite, and supporting tools to surface hardcoded credentials, DLL hijacking, insecure encryption, and authentication flaws before release.

Web Application Pentest

performing-web-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Leverages OWASP WSTG processes and Burp Suite to systematically validate web applications for authentication, authorization, input validation, session, and business-logic flaws ahead of deployment or during compliance checks.

Web Vulnerability Triage

performing-web-application-vulnerability-triage

mukul975/Anthropic-Cybersecurity-Skills

Validates DAST and SAST findings with OWASP risk-rating, filters false positives, and prioritizes remediation so teams focus on high-impact web-app issues identified by Burp/ZAP and managed in DefectDojo.

OWASP API Security Testing

testing-api-security-with-owasp-top-10

mukul975/Anthropic-Cybersecurity-Skills

Guides offensive and defensive teams through systematic REST, GraphQL, and gRPC API testing against the OWASP API Security Top 10, covering discovery, authorization flaws, authentication gaps, data exposure, and rate limiting checks with common tooling.

XML Injection Security Testing

testing-for-xml-injection-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Practical guide for testing XML injection flaws such as XXE, XPath injection, SSRF, and XML bombs across SOAP, XML-RPC, and file upload interfaces; includes detection cues, payloads, and toolchain recommendations.

WebSocket Security Tests

testing-websocket-api-security

mukul975/Anthropic-Cybersecurity-Skills

Probes WebSocket APIs for auth bypass, CSWSH, injection, DoS flooding, and info leakage by intercepting handshakes/messages with Burp Suite, crafting payloads, and scripting real-time assessments.

Language