burp-extensions

There are 49 repositories under burp-extensions topic.

• Mr-xn / BurpSuite-collections

  有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

  burp-extensionsburp-requestsburpsuiteburpsuite-extenderburpsuite-javaburpsuite-toolsburpsuite-xkeyshackbarhacktoolj2eescanjarpentest-toolpentestingpython-burpsendtoshiro-burpsqlmapwaf
  Language:HTML 3079

• aress31 / burpgpt

  A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.

  aiburp-extensionsburpsuitecybersecuritygptopenaipentestingsecuritysecurity-automationwebappburp-pluginburpsuite-extendergpt-3openai-api
  Language:Java 1896

• API-Security / APIKit

  APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

  burp-extensionsapisecapi-securityapi-sec
  Language:Java 1711

• wagiro / BurpBounty

  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

  bugbountyburp-extensionsburpsuitebug-bountyvulnerability-scannervulnerability-detection
  Language:Java 1625

• summitt / Nope-Proxy

  TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

  appsecappsecurityburp-extensionsburp-pluginburpsuiteburpsuite-extenderhackingmitmproxypentestingprotobufproxytcptcpproxyudpwebsocketsupdproxy
  Language:Java 1507

• bit4woo / knife

  A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

  burpburp-extensionsburp-pluginburpsuiteburpsuite-extendercookiehackbarheader-edithttp-editknifemenuu2cunicode-to-chineseupdate-cookie
  Language:Java 1483

• d3vilbug / HackBar

  HackBar plugin for Burpsuite

  burpburp-extensionsburp-pluginburp-uiburpsuiteburpsuite-extenderhackbar
  Language:Java 1476
• inql

  doyensec / inql

  InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

  graphqlsecurity-scannergraphql-securityapi-documentation-toolsecurity-toolssecurity-auditburp-extensionsburpsuitebugbountybugbounty-toolpenetration-testing
  Language:Python 1472

• whwlsfb / BurpCrypto

  BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

  burp-extensionsburp-pluginburpsuite-extenderburpsuitepayloadsburpcryptofuzz-testingexecute-js-encryptionctf-toolsctf
  Language:Java 1339

• f0ng / captcha-killer-modified

  captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

  burp-extensionsburpburp-plugin
  Language:Java 1218

• bit4woo / Fiora

  Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。

  nucleipocnuclei-guiburp-extensionsfiora
  Language:Java 1056

• alphaSeclab / awesome-burp-suite

  Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

  burpburp-extensionsburp-suite
  975

• sleeyax / burp-awesome-tls

  Fixes Burp Suite's poor TLS stack. Bypass WAF, spoof any browser.

  burpburp-cloudflare-bypassburp-extensionsburp-ja3burp-suiteburp-wafburpsuitegogolangja3ja3-fingerprintjavatlstls-fingerprintutls
  Language:Java 945

• c0ny1 / captcha-killer

  burp验证码识别接口调用插件

  burp-extensionsburpsuite-extenderburp-plugincaptcha
  Language:Java 848

• hisxo / ReconAIzer

  A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

  bugbountyburp-extensionsburpsuiteopenaiopenai-apigpt-4openai-chatgpt
  Language:Python 798

• bit4woo / reCAPTCHA

  reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

  burp-extensionsburp-plugincaptchaintruderburpsuiterecaptcharecognize-captcharecognizes-images
  Language:Java 790

• f0ng / log4j2burpscanner

  CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

  burp-extensionsburp-pluginlog4j2log4jshell
  Language:Java 776

• c0ny1 / sqlmap4burp-plus-plus

  sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

  burp-extensionsburpsuite-extendersqlmap
  Language:Java 702

• bit4woo / domain_hunter

  A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件

  burp-extensionsburp-pluginburpsuite-extendercertificatecertificationdomain-discoverydomain-hunterdomainshttps-certificateorganization-domainrelated-domainsimilar-domainsitemapspidersubdomainsubject-alternative-namesubject-namesubjectaltname
  Language:Java 658

• Ebryx / AES-Killer

  Burp Plugin to decrypt AES encrypted traffic on the fly

  burpsuiteaes-encryptiondecryptoraes-decryptionburp-pluginburp-extensionsburpburpsuite-extenderburpsuite-toolsburp-uiaes-killerburpsuite-pluginaes-encryption-keyfrida-script
  Language:Java 629

• synacktiv / HopLa

  HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

  burpburp-extensionsburp-pluginburp-suiteburp-ui
  Language:Java 591

• BishopFox / GadgetProbe

  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

  burp-extensionssecurity-toolsjava-deserializationpentestingpentest-toolsjavassistjava
  Language:Java 569

• vaycore / OneScan

  OneScan是递归目录扫描的BurpSuite插件

  burpburp-extensionsburp-plugindirscanfuzzfuzz-testing
  Language:Java 559

• silentsignal / burp-log4shell

  Log4Shell scanner for Burp Suite

  burpsuiteburp-extensionsburp-pluginburpsuite-extenderlog4j2
  Language:Kotlin 477

• Acmesec / Sylas

  新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool

  burp-extensionsburp-pluginburpsuite-extenderburpsuite-toolsscanscannerscanner-websubdomain-findersubdomain-scanner
  Language:Java 474

• hisxo / JSpector

  A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

  burp-extensionsburpsuiteburpsuite-tools
  Language:Python 341

• 1ultimat3 / BadIntent

  Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

  androidburp-extensionspentestingmobile-security
  Language:Java 321

• volkandindar / agartha

  a burp extension creates dynamic payloads to reveal injection flaws(LFI, RCE, SQLi), generates user access tables to spot authentication/authorization issues, and copys Http requests as JavaScript code.

  penetration-testingpentestingcybersecurityburp-extensionshackinghacking-toolapplication-securityappsecoffsecburpsuiteoffensivesecurity
  Language:Python 313

• prakharathreya / Struts2-RCE

  A Burp Extender for checking for struts 2 RCE vulnerabilities.

  struts2-rceburp-extensionsstruts2
  270

• c0ny1 / HTTPHeadModifer

  一款快速修改HTTP数据包头的Burp Suite插件

  burp-extensionshttphelper
  Language:Java 255

• vsec7 / BurpSuite-Xkeys

  A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

  burp-extensionsosintpentest-toolhackingpentestingburpsuite
  Language:Python 233

• bit4woo / u2c

  Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】

  burp-extensionsburp-pluginburpsuite-extenderchineseunicode
  Language:Java 229

• P3GLEG / PwnBack

  Burp Extender plugin that generates a sitemap of a website using Wayback Machine

  security-toolsburpburpsuiteburp-extensionsinformation-retrievalosint
  Language:Java 225

• d3mondev / burp-vps-proxy

  This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

  bugbountyburp-extensionsburpsuitepentestingproxysocks5
  Language:Java 222

• NetsOSS / headless-burp

  Automate security tests using Burp Suite.

  burpburp-extensionsburpsuiteburp-pluginmaven-pluginheadlesscontinuous-securityautomation
  Language:Java 222

• codingo / Minesweeper

  A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

  burpsuiteburpsuiteproburp-extensionsburp-pluginweb-securityhackinghacking-toolweb-application-hackingcryptocurrencybitcoincoinhivecoinhive-minersblacklistblacklist-extensionbugbountysecurity-auditsecurity-toolssecurity-scannerpenetration-testingcryptojacking
  Language:Python 193