kh4sh3i/AES-Helper

Burp Extension to manipulate AES encrypted payloads

Language: Python - Size: 87.9 KB - Last synced at: about 8 hours ago - Pushed at: about 10 hours ago - Stars: 0 - Forks: 0

sleeyax/burp-awesome-tls

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

Language: Java - Size: 1.95 MB - Last synced at: about 12 hours ago - Pushed at: 6 days ago - Stars: 1,559 - Forks: 92

bit4woo/knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

Language: Java - Size: 14 MB - Last synced at: about 14 hours ago - Pushed at: about 17 hours ago - Stars: 1,817 - Forks: 208

jagdishtripathy/AutoHighlighter

A lightweight Burp Suite extension that automatically highlights HTTP traffic to make sensitive findings stand out.

Language: Java - Size: 498 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

GitHubNull/repeaterManger

Enhanced Repeater Manager - Burp Suite 增强重放插件

Language: Java - Size: 221 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 1 - Forks: 0

volkandindar/agartha

A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers "Copy as JavaScript" to convert HTTP requests for enhanced XSS testing.

Language: Python - Size: 1.93 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 373 - Forks: 80

WuliRuler/AutorizePro

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

Language: Python - Size: 9.24 MB - Last synced at: 3 days ago - Pushed at: about 1 month ago - Stars: 432 - Forks: 28

xer0times/SQLi-Query-Tampering

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

Language: Python - Size: 307 KB - Last synced at: about 3 hours ago - Pushed at: about 5 years ago - Stars: 156 - Forks: 24

alphaSeclab/awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

Size: 127 KB - Last synced at: about 6 hours ago - Pushed at: over 5 years ago - Stars: 1,032 - Forks: 252

RyosukeDTomita/airis-burp-extensions

Burp Suite Extensions to analyze request and response using LLM.

Language: Java - Size: 124 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 1 - Forks: 0

roomkangali/DursBurp

DursBurp - AI Extension for Burp Suite

Language: Python - Size: 20.5 KB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 0 - Forks: 0

raise-isayan/YaguraExtender

Burpsuite extension. Supports CJK (Chinese, Japanese, Korean) encoding.

Language: Java - Size: 170 MB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 28 - Forks: 3

dewebdes/Mass-Hunt

Modular socket for symbolic feed diagnostics and Burp-powered anomaly hunting

Language: JavaScript - Size: 4.73 MB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 1 - Forks: 0

jagdishtripathy/Montoya-API

Montoya-API is a Burp Suite extension that links the MCP server with AI models, enabling AI-powered analysis, automation, and custom workflows in Burp Suite.

Language: Java - Size: 130 KB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 0 - Forks: 0

summitt/Nope-Proxy

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Language: Java - Size: 1.22 MB - Last synced at: 6 days ago - Pushed at: over 1 year ago - Stars: 1,635 - Forks: 240

doyensec/inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Language: Kotlin - Size: 18.8 MB - Last synced at: 9 days ago - Pushed at: 9 days ago - Stars: 1,665 - Forks: 169

f0ng/captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

Language: Java - Size: 2.27 MB - Last synced at: 11 days ago - Pushed at: 11 days ago - Stars: 1,760 - Forks: 165

usdAG/FlowMate

FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application and matches their occurrences in the responses.

Language: Java - Size: 761 KB - Last synced at: 12 days ago - Pushed at: 12 days ago - Stars: 163 - Forks: 10

trufflesecurity/trufflehog-burp-suite-extension

Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.

Language: Python - Size: 1.09 MB - Last synced at: 9 days ago - Pushed at: 6 months ago - Stars: 75 - Forks: 17

Theethat-Thamwasin/HeadYangDer-HTTP-Header-Checker

A Burp Suite extension that helps penetration testers analyze missing HTTP headers with a clean UI. Exporting the result is Available and can select Headers to hide or shown in result.

Language: Python - Size: 26.3 MB - Last synced at: 13 days ago - Pushed at: 13 days ago - Stars: 1 - Forks: 0

madgamer101/unicode2utf8

🔄 Convert Unicode code points to UTF-8 escape sequences and back, with customizable output formats and file saving options for easy use.

Language: Python - Size: 4.88 KB - Last synced at: 14 days ago - Pushed at: 15 days ago - Stars: 0 - Forks: 0

taradaidv/dev-sec-box

DevSecBox simplifies tasks for Bug Hunters and DevSecOps. It works with the command line, integrates with any tools, and manages your workflows.

Language: Java - Size: 4.06 MB - Last synced at: 14 days ago - Pushed at: 15 days ago - Stars: 3 - Forks: 2

oneclick-burp/BurpFusion-Core

One-Click BurpSuite Installer with essential plugins for penetration testers

Language: Batchfile - Size: 50.3 MB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 52 - Forks: 1

AI-Pentest/BurpInlineDecoder

Burp Suite extension that automatically extracts and decodes values from HTTP responses into the Intruder Comment field.

Language: Python - Size: 146 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 0 - Forks: 0

anvilsecure/aws-sigv4

Anvil Secure's Burp extension for signing AWS requests with SigV4

Language: Java - Size: 803 KB - Last synced at: about 3 hours ago - Pushed at: 17 days ago - Stars: 21 - Forks: 10

Anof-cyber/PyCript-WebSocket

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty in WebSocket

Language: Java - Size: 447 KB - Last synced at: 9 days ago - Pushed at: 19 days ago - Stars: 80 - Forks: 11

GitHubNull/copyElements

copy element of http in burpsuite history

Language: Java - Size: 29.3 KB - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 0 - Forks: 0

P3GLEG/PwnBack

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

Language: Java - Size: 56.6 KB - Last synced at: 6 days ago - Pushed at: over 7 years ago - Stars: 227 - Forks: 42

ghostvirus62/Burpsuite-Professional-Updated Fork of xiv3r/Burpsuite-Professional

Latest Burpsuite Professional for Linux only

Language: Shell - Size: 4.29 MB - Last synced at: 21 days ago - Pushed at: 21 days ago - Stars: 0 - Forks: 0

usdAG/cstc

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

Language: Java - Size: 25 MB - Last synced at: 16 days ago - Pushed at: 17 days ago - Stars: 247 - Forks: 30

Redguard/jwt-monitor

This Burp Suite extension monitors a provided JWT token for its expiration and replaces any already present JWT token in outgoing requests with the provided one

Language: Kotlin - Size: 4 MB - Last synced at: 6 days ago - Pushed at: 23 days ago - Stars: 1 - Forks: 1

synacktiv/HopLa

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

Language: Java - Size: 413 KB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 764 - Forks: 81

aleister1102/copycat

Burp Suite extension for copying HTTP requests/responses with header filtering.

Language: Java - Size: 82 KB - Last synced at: 27 days ago - Pushed at: 27 days ago - Stars: 0 - Forks: 0

cyal1/PyBurp

PyBurp is a Burp Suite extension that provides predefined Python functions for HTTP/WebSocket traffic modification, context menu registration, Intruder payload processing, passive/active scanning, and Collaborator interaction. You can also directly access Montoya API in your Python scripts.

Language: Java - Size: 2.47 MB - Last synced at: 7 days ago - Pushed at: 28 days ago - Stars: 28 - Forks: 10

Julio-Itamar/Recap

Recap simplifies content summarization with user-friendly features. Explore its capabilities on GitHub! 🐙

Language: Swift - Size: 1.04 MB - Last synced at: 26 days ago - Pushed at: 26 days ago - Stars: 0 - Forks: 0

augustd/burp-suite-jsonpath

JSONPath extension for BurpSuite

Language: Java - Size: 1 MB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 31 - Forks: 9

StephenSantilli/TOTP

A Burp Suite extension for generating and using time-based one-time passwords (TOTP)

Language: Java - Size: 1.24 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

saoshao/DetSql

Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率

Language: Java - Size: 163 KB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 594 - Forks: 31

HackWithSumit/BurpSuite-Pro-2025

Latest Burpsuite 2025 Professional

Language: Nix - Size: 3.82 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

PatrikFehrenbach/burpsuite-js-extractor

A simple plugin to export JS files from one or multiple targets

Language: Python - Size: 9.77 KB - Last synced at: 6 days ago - Pushed at: almost 2 years ago - Stars: 43 - Forks: 6

feastea/BackupFinder

Discover backup files on web servers with BackupFinder. Generate intelligent patterns for effective penetration testing and security audits. 🛠️💻

Language: Go - Size: 1.36 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

raise-isayan/ImageMetaDataExtract

Language: Java - Size: 8.71 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

aleister1102/mimegen

Burp Suite extension for inspecting, copying, searching, and modifying MIME types in HTTP messages.

Language: Java - Size: 75.2 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 0

ahanel13/Firewall-Ferret

This java project was created with Portswigger's Montoya API to be a Burp Extension. It's well known that WAFs only scan up to a certain amount of data per request. This extension allows a tester to manually insert junk data and adds junk data to Active Scans by duplicating each scan check.

Language: Java - Size: 138 KB - Last synced at: 8 days ago - Pushed at: about 1 month ago - Stars: 1 - Forks: 2

NakuTenshi/dom-invader-chrome-extension

Unpacked DOM Invader Chrome extension for easy installation and use outside Burp Suite empowering bug bounty hunters and web security researchers.

Language: HTML - Size: 2.24 MB - Last synced at: 27 days ago - Pushed at: about 1 month ago - Stars: 1 - Forks: 0

RaffaDNDM/Burp-extensions

Java and Python extensions for Burp Suite application

Language: Java - Size: 1.8 MB - Last synced at: 14 days ago - Pushed at: over 2 years ago - Stars: 4 - Forks: 0

vaadata/java-serde

A Burp extension and CLI to encode and decode Java Object Stream into a JSON representation.

Language: Java - Size: 176 KB - Last synced at: 9 days ago - Pushed at: 9 months ago - Stars: 5 - Forks: 0

devopscoder331/Burp-Sitemap-Exporter

Sitemap Exporter is an extension for Burp Suite that lets you export items from the Site Map to files on your disk.

Language: Java - Size: 1.71 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 3 - Forks: 1

f0ng/autoDecoder-usages

autoDecoder的用法及案例，包含加解密方法、绕waf、替换参数等操作。

Language: Python - Size: 41.3 MB - Last synced at: about 2 months ago - Pushed at: about 1 year ago - Stars: 261 - Forks: 33

bit4woo/Fiora

Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。

Language: Java - Size: 1.83 MB - Last synced at: about 2 months ago - Pushed at: 2 months ago - Stars: 1,239 - Forks: 146

rathu2306/minesweeper

Minesweeper is a classic game brought to life with Python and Pygame, featuring a smart AI that uses logic to make strategic moves. Explore the blend of fun and learning as you dive into AI concepts while playing! 🕹️💻

Language: Python - Size: 145 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

luciaga03/Headsup

Headsup is a powerful addon for World of Warcraft: Wrath of the Lich King 3.3.5a that enhances your gameplay by tracking buffs and procs directly on your screen. With easy-to-use customization options, you can set it up to fit your playstyle perfectly. 🦸♂️💻

Language: Lua - Size: 357 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

1ultimat3/BadIntent 📦

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

Language: Java - Size: 3.62 MB - Last synced at: about 2 months ago - Pushed at: about 8 years ago - Stars: 322 - Forks: 49

JaveleyQAQ/SQL-Injection-Scout

SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。

Language: Kotlin - Size: 2.27 MB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 147 - Forks: 6

vaycore/OneScan 📦

OneScan 是一款用于递归目录扫描的 BurpSuite 插件

Language: Java - Size: 5.2 MB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 1,142 - Forks: 60

ivision-research/burpscript

Language: Kotlin - Size: 190 KB - Last synced at: 17 days ago - Pushed at: 4 months ago - Stars: 61 - Forks: 1

ax/burp-logs

Logs is a Burp Suite extension to work with log files.

Language: Java - Size: 63.5 KB - Last synced at: 2 months ago - Pushed at: almost 4 years ago - Stars: 10 - Forks: 7

Acmesec/Sylas

新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool

Language: Java - Size: 2.72 MB - Last synced at: about 2 months ago - Pushed at: almost 3 years ago - Stars: 494 - Forks: 51

artssec/burp-exporter

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

Language: Python - Size: 621 KB - Last synced at: 30 days ago - Pushed at: almost 4 years ago - Stars: 178 - Forks: 36

ZishanAdThandar/burptoggle

Burp Suite Proxy Toggler Lite Add-on for Mozilla Firefox.

Language: JavaScript - Size: 67.4 KB - Last synced at: about 2 months ago - Pushed at: about 1 year ago - Stars: 32 - Forks: 6

GitHubNull/RemoveExtraBlankLines

这是一个用于 Burp Suite 的插件，能够自动去除 HTTP 请求和响应报文头部与正文之间的多余空行。该插件使用 Montoya API 开发，遵循 HTTP 协议标准，确保头部和正文之间只保留一个规范的空行。

Language: Java - Size: 60.5 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

silentsignal/burp-log4shell

Log4Shell scanner for Burp Suite

Language: Kotlin - Size: 163 KB - Last synced at: about 2 months ago - Pushed at: almost 2 years ago - Stars: 486 - Forks: 73

thomashartm/burp-domsink-logger

Injects a trusted types policy into an HTML page to log all DOM sinks whenever HTML is written into the DOM.

Language: Java - Size: 53.7 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 11 - Forks: 2

Fcvebf/ExporterBurpSuiteExtension

This Burp Suite extension allows the user to upload the identified security issues directly to Pwndoc or export them in various document formats.

Language: Java - Size: 1.08 MB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

GitHubNull/showMeUCode

ShowMeUCode是一个Burp Suite插件，用于在HTTP历史记录中显示隐藏在请求体中的真实接口名称。

Language: Java - Size: 63.5 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

pentagridsec/PentagridScanController

Improve automated and semi-automated active scanning in Burp Pro

Language: Kotlin - Size: 5.17 MB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 61 - Forks: 4

raise-isayan/ViewStateDecoder

Burpsuite extension. Supports ASP.NET ViewStateDecoder

Language: Java - Size: 3.76 MB - Last synced at: about 2 months ago - Pushed at: over 1 year ago - Stars: 34 - Forks: 4

doyensec/CSPTBurpExtension

CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

Language: Java - Size: 146 KB - Last synced at: 3 months ago - Pushed at: about 1 year ago - Stars: 140 - Forks: 8

tkmru/lazyCSRF 📦

A more useful CSRF PoC generator on Burp Suite

Language: Java - Size: 1.28 MB - Last synced at: about 2 months ago - Pushed at: about 3 years ago - Stars: 86 - Forks: 15

c0ny1/captcha-killer

burp验证码识别接口调用插件

Language: Java - Size: 5.73 MB - Last synced at: 4 months ago - Pushed at: about 3 years ago - Stars: 901 - Forks: 120

API-Security/APIKit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

Language: Java - Size: 15 MB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 2,088 - Forks: 177

aress31/burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

Language: Java - Size: 194 KB - Last synced at: 4 months ago - Pushed at: about 1 year ago - Stars: 2,136 - Forks: 260

whwlsfb/BurpCrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

Language: Java - Size: 11 MB - Last synced at: 4 months ago - Pushed at: about 2 years ago - Stars: 1,517 - Forks: 171

hisxo/ReconAIzer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

Language: Python - Size: 43 KB - Last synced at: 4 months ago - Pushed at: over 2 years ago - Stars: 875 - Forks: 111

d3vilbug/HackBar

HackBar plugin for Burpsuite

Language: Java - Size: 171 KB - Last synced at: 4 months ago - Pushed at: over 4 years ago - Stars: 1,568 - Forks: 256

bit4woo/reCAPTCHA

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

Language: Java - Size: 1.29 MB - Last synced at: 4 months ago - Pushed at: almost 2 years ago - Stars: 810 - Forks: 155

aress31/openapi-parser

Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).

Language: Java - Size: 1.07 MB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 200 - Forks: 54

bit4woo/domain_hunter

A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件

Language: Java - Size: 6.3 MB - Last synced at: 4 months ago - Pushed at: about 2 years ago - Stars: 673 - Forks: 130

f0ng/log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

Language: Java - Size: 271 KB - Last synced at: 4 months ago - Pushed at: about 2 years ago - Stars: 826 - Forks: 112

BishopFox/GadgetProbe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

Language: Java - Size: 1.97 MB - Last synced at: 3 months ago - Pushed at: over 4 years ago - Stars: 599 - Forks: 97

c0ny1/sqlmap4burp-plus-plus

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

Language: Java - Size: 1010 KB - Last synced at: 4 months ago - Pushed at: almost 6 years ago - Stars: 773 - Forks: 82

marksowell/Info-Leakage

Burp Suite extension designed to help security professionals search for custom sensitive information in HTTP responses

Language: Python - Size: 263 KB - Last synced at: about 12 hours ago - Pushed at: over 2 years ago - Stars: 11 - Forks: 1

ZoneSentinel/Wish-Granter

Send your requests/responses to a LLM and have it analyze it.

Language: Python - Size: 88.9 KB - Last synced at: 2 months ago - Pushed at: 5 months ago - Stars: 4 - Forks: 0

d3mondev/burp-vps-proxy

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

Language: Java - Size: 189 KB - Last synced at: 4 months ago - Pushed at: 6 months ago - Stars: 243 - Forks: 28

Anof-cyber/ParaForge

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

Language: Python - Size: 7.81 KB - Last synced at: 4 months ago - Pushed at: about 2 years ago - Stars: 140 - Forks: 18

hisxo/JSpector

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

Language: Python - Size: 23.4 KB - Last synced at: 3 months ago - Pushed at: about 2 years ago - Stars: 360 - Forks: 36

dr34mhacks/formatify

Formatify is a Burp Suite extension that instantly converts HTTP requests into multiple formats like cURL, Python, PowerShell, and more—saving time and streamlining your workflow. 🚀

Language: Python - Size: 37.1 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 22 - Forks: 2

righettod/log-requests-to-sqlite 📦

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

Language: Java - Size: 1.37 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 65 - Forks: 16

nxenon/grpc-pentest-suite

gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications

Language: Python - Size: 327 KB - Last synced at: 4 months ago - Pushed at: 6 months ago - Stars: 218 - Forks: 17

simioni87/auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

Language: Java - Size: 1.23 MB - Last synced at: 4 months ago - Pushed at: about 1 year ago - Stars: 199 - Forks: 51

Anof-cyber/PyCript

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty

Language: Python - Size: 1.23 MB - Last synced at: 4 months ago - Pushed at: 5 months ago - Stars: 206 - Forks: 29

moeinfatehi/Admin-Panel_Finder

A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)

Language: Java - Size: 188 KB - Last synced at: 5 months ago - Pushed at: about 3 years ago - Stars: 118 - Forks: 20

yeswehack/YesWeBurp

YesWeHack Api Extension for Burp

Language: Kotlin - Size: 58.6 KB - Last synced at: 5 months ago - Pushed at: about 1 year ago - Stars: 87 - Forks: 13

moeinfatehi/Backup-Finder

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

Language: Java - Size: 272 KB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 161 - Forks: 28

mgeeky/burpContextAwareFuzzer 📦

BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JSON; XML; GWT; binary) and following encoding-scheme applied originally.

Language: Python - Size: 5.55 MB - Last synced at: 5 months ago - Pushed at: over 4 years ago - Stars: 41 - Forks: 15

nscuro/bradamsa-ng 📦

Burp Suite extension for Radamsa-powered fuzzing with Intruder

Language: Java - Size: 1.86 MB - Last synced at: about 2 months ago - Pushed at: over 3 years ago - Stars: 20 - Forks: 7

hvqzao/burp-wildcard

Burp extension intended to compact Burp extension tabs by hijacking them to own tab.

Language: Java - Size: 109 KB - Last synced at: 5 months ago - Pushed at: over 4 years ago - Stars: 130 - Forks: 15

bayotop/sink-logger 📦

Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.

Language: Python - Size: 180 KB - Last synced at: 5 months ago - Pushed at: about 3 years ago - Stars: 49 - Forks: 10

silentsignal/burp-piper

Piper Burp Suite Extender plugin

Language: Kotlin - Size: 479 KB - Last synced at: 5 months ago - Pushed at: over 1 year ago - Stars: 120 - Forks: 12

vsec7/BurpSuite-Xkeys

A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

Language: Python - Size: 106 KB - Last synced at: 5 months ago - Pushed at: about 1 year ago - Stars: 290 - Forks: 61