SECTIV

Summary from the TLDR InfoSec newsletter

Sectiv is a Burp Suite extension that runs captured proxy traffic past an LLM, guided by editable "skills" for IDOR, XSS, SQLi, and SSRF, and returns triaged findings with CVSS scores and HTML, Python, or curl PoCs. Testers can load two accounts to help the model reason about broken access control. It masks cookies, tokens, and JWTs before sending traffic to providers like OpenAI, Claude, DeepSeek, or a local Ollama model. Skills can be imported, exported, and tailored per target, and findings export to HTML, Markdown, or JSON for reporting.