PortSwigger

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

param-miner

BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

dastardly-github-action

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

bambdas

Bambdas collection for Burp Suite Professional and Community.

bypass-bot-detection

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

burp-extensions-montoya-api

Burp Extensions Api

json-web-tokens

JWT Support for Burp

replicator

Burp extension to help developers replicate findings from pen tests

splitting-the-email-atom

software-vulnerability-scanner

Vulnerability scanner based on vulners.com search API

saml-raider

SAML2 Burp Extension

highlighter-and-extractor

HaE - BurpSuite Highlighter and Extractor

jwt-editor

A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation.

bseept

Burp Suite Enterprise Edition Power Tools

reshaper

Burp Suite Extension - Trigger actions and reshape HTTP request and response traffic using configurable rules

get-all-parameters

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

certsquirt

A golang PKI in less than 1000 lines of code.

pyburp

BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the Burp Suite proxy using Jython code or gRPC, especially when dealing with encrypted requests.

cstc

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

padding-oracle-hunter

enterprise-helm-charts

Helm charts for BSEE Kubernetes installation.

burp-suite-enterprise-edition-ami

jwt-scanner

JWT-attacker Burp Extension

websocket-turbo-intruder

Fuzz WebSockets with custom Python code

bulk-send-to-repeater

bulkAddToRepeater Burp Extension to Allow Mass "Send to Repeater" Using Context Menu

display-switcher

Repository for the DisplaySwitcher Burp Suite extension

dpop-authenticator

Burp Extension DPoP