New video on the AppSec Untangled channel: a live demo of using Claude Code for pentesting, integrated with Burp Suite via MCP and Playwright as a browser agent.
The demo covers IDOR, authentication, and CSRF test cases. Opening Claude Code from the app’s source directory gives it code context, so it can trace findings back to the relevant code, closer to a white-box pentest than a typical automated scan. Hope you find it useful!
