# Burpsuite

> burpsuite

- Skill: `sameh1200/burpsuite` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add sameh1200/burpsuite`
- Raw SKILL.md: https://api.skillmd.com/api/skills/sameh1200/burpsuite/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: Sameh1200 (https://skillmd.com/u/sameh1200)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/sameh1200/burpsuite

---

# burpsuite

## Repo
https://portswigger.net/burp  
Community edition available free from PortSwigger.

## Installation
```bash
# Download Community or Pro from portswigger.net
# Launch
java -jar burpsuite_community.jar

# Kali often ships with it or via apt
```

## Using
```bash
# Start Burp → set browser proxy to 127.0.0.1:8080
# Install CA certificate from http://burpsuite

# Core workflow:
# - Proxy: intercept + history
# - Repeater: manual request editing
# - Intruder: controlled fuzzing
# - Scanner (Pro): active scanning
# - Collaborator: out-of-band detection
```

## Current Step
Manual traffic interception, request manipulation, and validation of automated findings.

## Next Step
Use Repeater / Intruder on interesting requests from httpx / nuclei / ffuf. Confirm impact and write the report.

## Errors Fixes
- Certificate warnings → install Burp CA in browser and system trust store
- Java version → use a supported JDK
- Low memory → increase -Xmx in the launch command
- Community limits → Pro required for full scanner and some extensions