Burp Suite

Purpose

Use this skill for manual, high-signal testing of web applications and APIs once the target surface is understood.

Phase Fit

• Primary: Vulnerability Analysis, Validation and Controlled Impact Demonstration
• Secondary: Retest and Closure

Use When

• Need to inspect authenticated workflows, session handling, or access control.
• Need to confirm business logic issues or request-level trust assumptions.
• Need a clean proof path for a web or API finding.

Avoid When