meliht / BurpBounty

Burp Bounty (Scan Check Builder in BApps Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

Burp Bounty - Scan Check Builder (BApps Store)

Download releases:

• https://github.com/wagiro/BurpBounty/releases/

This BurpSuite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an improvement of the payload to send, we can create our own issue profiles both in the active scanner and in the passive.

Usage

• Go to Usage section.

Profiles

• Generic Examples

• Advanced Profiles

• Profiles from Xer0dayz in their Github

For example videos please visit our youtube channel (Examples for version 1.2):

• YouTube

Contributions and feature requests are welcome!

Changelog

2.3 20181029

• Improved profile manager
• Fixed some minor problems

2.2 20181026

• Fixed some minor problems

2.1 20181024

• Replace strings in payloads
• Field to put profile authors information
• Timeout option for blind vulns
• Multiple lines bb json file

2.0 20181020

• Add the burpcollaborator support
• Follow redirects and how many to follow
• Payload append or replace
• Space encoding choose
• Response codes to avoid
• Content type to avoid

1.2 20180607

• Solved bug with payload space
• Add "Exclude HTTP Headers" feature
• Add "Only in HTTP Headers" feature

1.1 20180606

• Some improvements for integrate with the BApps Store

1.0 20180531

• First public release