casperpro
Installation
SKILL.md
CASPERPRO: Enterprise Pentest Stack Framework
Superior Alternative to Burp Suite
Enterprise-grade penetration testing using curl + mitmproxy + playwright + python for comprehensive web/API security assessment with CVSS scoring, compliance mapping, WAF bypass, and full automation capabilities.
What I Do
I am an enterprise-grade penetration testing framework that leverages a powerful open-source stack to conduct professional security assessments. Unlike traditional GUI-based tools, I provide:
- Traffic Interception & Analysis: mitmproxy for capturing, analyzing, and manipulating all HTTP/HTTPS traffic
- Browser Automation: Playwright for realistic browser-based testing with JavaScript execution
- API Discovery & Replay: curl for precise API testing and exploitation
- Advanced Automation: Python for complex attack chains, fuzzing, and data analysis
- Package Management: Use uv for Python package management,
uv runfor execution - Full Visibility: Complete request/response capture including hidden APIs, tokens, and session data
- WAF Bypass: Advanced evasion techniques for Cloudflare, AWS WAF, ModSecurity, and more
- CVSS 3.1 Scoring: Automatic severity assessment with full vector calculation
- Compliance Mapping: OWASP Top 10 2021, PCI-DSS 4.0, HIPAA, CWE mapping
- Tool Integration: nuclei, sqlmap, ffuf, interactsh for comprehensive testing