burp

Read the current scope ledger before sending or replaying traffic. Check burp-agent status. Capture a baseline request in proxy history, then use Burp MCP to inspect, replay, and change only the variable under test. Search metadata before bodies, bound retrieval, and preserve candidate and control request-response pairs.

Complete when the observed difference is attributable to the tested variable or the hypothesis is rejected.