What problem does it solve? Authorized penetration testers need to dynamically confirm whether access control (IDOR/BFLA), authentication/session, SSRF, and path traversal vulnerabilities found in source code are actually exploitable, while keeping all traffic auditable and scope-enforced. This Skill routes existing deterministic attack scripts through the Burp Suite proxy and adds Burp MCP tools for deeper interactive verification. ## Core Features & Use Cases - Hybrid proxy-routed exploitation: Runs existing attack_*.py scripts through the Burp proxy (127.0.0.1:8080) so scope_guard enforcement, deterministic verdicts, and reporting stay intact while traffic accumulates in Burp history. - MCP-assisted deep dives: Uses Burp MCP tools such as send_http1_request, proxy history queries, url_encode, and Collaborator payloads to deepen confirmed findings, with mandatory scope_guard pre-validation of target hosts. - Use Case: After a static scan flags a potential IDOR on a staging server, run the audit script with --burp-proxy, capture user A's session request from Burp history, swap in user B's token, and confirm whether a 200 response with another user's data proves the vulnerability. ## Quick Start Ask the AI to verify access control and session vulnerabilities on http://localhost:8080 through the Burp proxy after running the burp_preflight check.
