Repositories list

• shadow-repeater

  Public
  Java

  •4•5•0•0•Updated Feb 21, 2025Feb 21, 2025

• spoofproof

  Public
  Java

  •

  MIT License

  •2•2•0•0•Updated Feb 20, 2025Feb 20, 2025

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •221•1.6k•14•1•Updated Feb 20, 2025Feb 20, 2025

• ai-http-analyzer

  Public
  AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innovative extension harnesses the power of AI to automate vulnerability detection, provide intelligent analysis, and assist security professionals in identifying complex security issues.

  Java

  •

  MIT License

  •6•4•0•0•Updated Feb 19, 2025Feb 19, 2025

• hackvertor

  Public
  Java

  •50•89•0•0•Updated Feb 14, 2025Feb 14, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •15•135•2•0•Updated Feb 13, 2025Feb 13, 2025

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •8•155•11•0•Updated Feb 13, 2025Feb 13, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •34•241•1•1•Updated Feb 13, 2025Feb 13, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•2•0•0•Updated Feb 12, 2025Feb 12, 2025

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •6•4•2•2•Updated Feb 12, 2025Feb 12, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•7•0•2•Updated Feb 10, 2025Feb 10, 2025

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  GNU Lesser General Public License v3.0

  •120•666•28•0•Updated Feb 10, 2025Feb 10, 2025

• burp-variables

  Public
  Burp Suite extension that extends Burp to support storing and reusing variables in requests

  Java

  •

  MIT License

  •1•0•0•0•Updated Feb 5, 2025Feb 5, 2025

• url-cheatsheet-data

  Public
  This is the data that powers the PortSwigger URL validation bypass cheat sheet.

  JavaScript

  •6•36•3•0•Updated Feb 5, 2025Feb 5, 2025

• param-miner

  Public
  Java

  •

  Other

  •170•1.3k•19•5•Updated Feb 3, 2025Feb 3, 2025

• javascript-encode-as

  Public
  Basic Burp Plugin to allow encoding strings to JavaScript encodings (Unicode/Hex).

  Python

  •

  MIT License

  •1•1•0•0•Updated Jan 31, 2025Jan 31, 2025

• license-title-cleaner

  Public
  Removing " - licensed to .*" from Burp window title

  Java

  •1•0•0•0•Updated Jan 31, 2025Jan 31, 2025

• collabfiltrator

  Public
  Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

  Java

  •

  GNU General Public License v3.0

  •56•6•0•0•Updated Jan 31, 2025Jan 31, 2025

• pesd-exporter

  Public
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams

  HTML

  •

  Apache License 2.0

  •8•5•0•0•Updated Jan 30, 2025Jan 30, 2025

• timestamp-injector

  Public
  Burp Suite Extension to inject timestamps into HTTP requests

  Java

  •

  Apache License 2.0

  •1•0•0•0•Updated Jan 30, 2025Jan 30, 2025

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •12•297•0•0•Updated Jan 29, 2025Jan 29, 2025

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  Kotlin

  •1•0•0•0•Updated Jan 29, 2025Jan 29, 2025

• aws-signer

  Public
  Burp Extension for AWS Signing

  Java

  •

  MIT License

  •38•6•0•0•Updated Jan 29, 2025Jan 29, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •192•214•0•1•Updated Jan 28, 2025Jan 28, 2025

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

  Java

  •

  Apache License 2.0

  •15•29•0•0•Updated Jan 24, 2025Jan 24, 2025

• enterprise-reference-stack-for-aws

  Public
  Smarty

  •

  Apache License 2.0

  •7•11•0•0•Updated Jan 21, 2025Jan 21, 2025

• customizer

  Public
  Because just a dark theme wasn't enough!

  Java

  •

  GNU Affero General Public License v3.0

  •47•2•0•0•Updated Jan 15, 2025Jan 15, 2025

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  Python

  •

  MIT License

  •26•8•0•0•Updated Jan 15, 2025Jan 15, 2025

• trusted-types-checker

  Public
  Python

  •1•0•0•0•Updated Jan 8, 2025Jan 8, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •76•30•0•0•Updated Jan 6, 2025Jan 6, 2025