Skill UI

Search, filter, and extract data from Burp Suite .burp files via the burpsuite-project-file-parser CLI wrapper, letting you fetch targeted headers, audit findings, or traffic snippets without loading the GUI when hunting for security issues.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

A comprehensive guide for intercepting and analyzing HTTP/HTTPS traffic from mobile applications using Burp Suite. This skill walks through configuring proxies on Android and iOS, handling CA certificate installation, and executing advanced penetration testing techniques. It is essential for assessing API security, identifying data leakage, and finding authentication vulnerabilities in mobile client-server communications.

A comprehensive guide detailing how to identify and validate Cross-Site Scripting (XSS) vulnerabilities using Burp Suite's advanced tools (Repeater, Intruder, DOM Invader). This methodology covers reflected, stored, and DOM-based XSS, and includes strategies for bypassing security filters and Content Security Policy (CSP), making it essential for web application penetration testing and bug bounty programs.

A command-line utility to search and extract data from Burp Suite project files (.burp). It enables searching response headers or bodies with regex patterns, extracting security audit findings, and analyzing HTTP traffic. Requires Burp Suite Professional and a specific extension. Ideal for security auditing and traffic analysis without opening the GUI.