Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with burp

A curated list of projects in awesome lists tagged with burp .

https://github.com/bit4woo/knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

burp burp-extensions burp-plugin burpsuite burpsuite-extender cookie hackbar header-edit http-edit knife menu u2c unicode-to-chinese update-cookie

Last synced: 14 May 2025

https://github.com/f0ng/captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

burp burp-extensions burp-plugin

Last synced: 14 May 2025

https://github.com/evilc0deooo/pentesterspecialdict

构建并优化高效的渗透测试字典集合，以提升网络安全从业人员的测试效率和效果。

blast boom burp dictionary fuzz fuzzing

Last synced: 15 May 2025

https://github.com/evilc0deooo/PentesterSpecialDict

构建并优化高效的渗透测试字典集合，以提升网络安全从业人员的测试效率和效果。

blast boom burp dictionary fuzz fuzzing

Last synced: 03 Sep 2025

https://github.com/f0ng/autodecoder

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

burp burp-plugin burpsuite-extender

Last synced: 08 Oct 2025

https://github.com/vaycore/OneScan

OneScan 是一款用于递归目录扫描的 BurpSuite 插件

burp burp-extensions burp-plugin burpsuite burpsuite-extender dir-fuzz dir-scanner dir-search dirscan fuzz

Last synced: 07 Sep 2025

https://github.com/f0ng/autoDecoder

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

burp burp-plugin burpsuite-extender

Last synced: 11 Jul 2025

https://github.com/synacktiv/HopLa

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

burp burp-extensions burp-plugin burp-suite burp-ui

Last synced: 13 May 2025

https://github.com/six2dez/burp-ai-agent

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

ai appsec bugbounty burp burp-extensions burp-plugin burp-suite hacking kotlin llm mcp pentesting security web-security

Last synced: 07 Mar 2026

https://github.com/nccgroup/blackboxprotobuf

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

burp protobuf

Last synced: 14 May 2025

https://github.com/modzero/mod0BurpUploadScanner

HTTP file upload scanner for Burp Proxy

burp extension fileupload multipart scanner security uploadscanner

Last synced: 19 Apr 2025

https://github.com/0x4D31/burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

automation burp burpsuite devops python security security-automation security-scanner security-tools web-security

Last synced: 11 Apr 2025

https://github.com/0x4d31/burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

automation burp burpsuite devops python security security-automation security-scanner security-tools web-security

Last synced: 15 Feb 2026

https://github.com/modzero/mod0burpuploadscanner

HTTP file upload scanner for Burp Proxy

burp extension fileupload multipart scanner security uploadscanner

Last synced: 02 Apr 2025

https://github.com/xsscx/fuzz

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

burp burpsuite exploit fuzzing header html http injection injection-signatures input javascript malicious poc random rce xss

Last synced: 16 May 2026

https://github.com/compasssecurity/samlraider

SAML2 Burp Extension

burp saml

Last synced: 24 Feb 2026

https://github.com/CompassSecurity/SAMLRaider

SAML2 Burp Extension

burp saml

Last synced: 02 Apr 2025

https://github.com/xsscx/commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

burp burpsuite exploit fuzzing header html http injection injection-signatures input javascript malicious poc random rce xss

Last synced: 05 Apr 2025

https://github.com/xsscx/Commodity-Injection-Signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

burp burpsuite exploit fuzzing header html http injection injection-signatures input javascript malicious poc random rce xss

Last synced: 11 Jul 2025

https://github.com/javeleyqaq/sql-injection-scout

SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。

burp burp-extensions burp-plugin burpsuite sqlinject sqlinjection sqlinjectionattack

Last synced: 06 Feb 2026

https://github.com/nxenon/grpc-pentest-suite

gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)

burp burp-extensions burpsuite extension grpc grpc-pentesting grpc-tool grpc-web pentesting-grpc protobuf protocol-buffers

Last synced: 27 Feb 2026

https://github.com/P3GLEG/PwnBack

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

burp burp-extensions burpsuite information-retrieval osint security-tools

Last synced: 19 Apr 2025

https://github.com/p3gleg/pwnback

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

burp burp-extensions burpsuite information-retrieval osint security-tools

Last synced: 20 Aug 2025

https://github.com/cujanovic/Content-Bruteforcing-Wordlist

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

brute-force bruteforce burp burpsuite directory pentest-tool pentesting

Last synced: 27 Jul 2025

https://github.com/putsi/privatecollaborator

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

bugbounty burp burpsuite burpsuitepro collaborator penetration-testing penetration-testing-tools

Last synced: 12 May 2025

https://github.com/forcesunseen/graphquail

Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

burp extension graphql security suite testing

Last synced: 31 Mar 2025

https://github.com/moeinfatehi/Backup-Finder

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

application-security appsecurity backupfinder burp burp-extensions burpsuite burpsuite-extender data-leakage owasp owasp-top-10 owasp-top-ten penetration-testing pentesting portswigger sensitive-data-exposure

Last synced: 13 May 2025

https://github.com/kapytein/jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.

burp burp-extensions infosec pentesting

Last synced: 19 Apr 2025

https://github.com/six2dez/burp-bounty-profiles

Burp Bounty profiles compilation, feel free to contribute!

bounty burp burpsuite hacking pentest

Last synced: 11 Jul 2025

https://github.com/GoSecure/csp-auditor

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

burp burp-plugin csp hacktoberfest http security zap zap-plugin

Last synced: 31 Mar 2025

https://github.com/gosecure/csp-auditor

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

burp burp-plugin csp hacktoberfest http security zap zap-plugin

Last synced: 05 Apr 2025

https://github.com/silentsignal/burp-requests

Copy as requests plugin for Burp Suite

burp python-requests

Last synced: 21 Jan 2026

https://github.com/hvqzao/burp-wildcard

Burp extension intended to compact Burp extension tabs by hijacking them to own tab.

burp burp-extensions burp-plugin burpsuite

Last synced: 19 Apr 2025

https://github.com/Anof-cyber/Pentest-Mapper

A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities

appsec bugbounty burp burp-extensions burp-plugin burpsuite burpsuite-extender burpsuite-tools infosec pentesting

Last synced: 13 May 2025

https://github.com/thomaspatzke/wase

The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

burp burp-plugin elasticsearch pentesting webappsec

Last synced: 17 Mar 2025

https://github.com/anof-cyber/pentest-mapper

A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities

appsec bugbounty burp burp-extensions burp-plugin burpsuite burpsuite-extender burpsuite-tools infosec pentesting

Last synced: 23 Feb 2026

https://github.com/thelicato/portswigger-labs

A collection of solutions for every PortSwigger Academy Lab (in progress)

academy burp labs portswigger security

Last synced: 18 Jan 2026

https://github.com/d3k4z/burp-copy-as-ffuf

Burp Extension that copies a request and builds a FFUF skeleton

burp burp-extensions burpsuite ffuf jython

Last synced: 12 Jul 2025

https://github.com/silentsignal/burp-image-size

Image size issues plugin for Burp Suite

burp imagetragick

Last synced: 21 Jan 2026

https://github.com/synfron/ReshaperForBurp

Burp Suite Extension - Trigger actions and reshape HTTP request/response and WebSocket traffic using configurable rules

burp http modify reshaper rules traffic

Last synced: 13 May 2025

https://github.com/mrts/burp-suite-http-proxy-history-converter

Python script that converts Burp Suite HTTP proxy history files to CSV or HTML

burp csv python

Last synced: 30 Apr 2025

https://github.com/ziirish/burp-ui

Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap

backup burp flask python ui

Last synced: 12 Apr 2025

https://github.com/thomashartm/burp-aem-scanner

Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common misconfigurations and security holes.

adobe-experience-manager aem burp burp-extensions burp-plugin dispatcher java security-audit security-automation

Last synced: 16 Mar 2025

https://github.com/augustd/burp-suite-error-message-checks

Burp Suite extension to passively scan for applications revealing server error messages

burp burp-extensions burp-plugin burpsuite java penetration-testing pentest scanning

Last synced: 16 Jan 2026

https://github.com/jiangsir404/Xss-Sql-Fuzz

burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz

burp burp-extensions burpsuite python

Last synced: 13 Mar 2025

https://github.com/marco-lancini/docker_burp

Burp as a Docker Container

burp burpsuite docker docker-compose

Last synced: 22 Mar 2025

https://github.com/chopicalqui/TurboDataMiner

The objective of this Burp Suite extension is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite project as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests using Python scripts. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected by Burp Suite.

burp burp-api burp-extensions burp-plugin burpsuite burpsuite-extender data-mining intelligence intelligence-gathering

Last synced: 19 Apr 2025

https://github.com/bit4woo/burp-api-common

common methods that used by my burp extension projects

burp burp-api burp-extensions burp-plugin methods

Last synced: 13 May 2025

https://github.com/JaveleyQAQ/SQL-Injection-Scout

SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。

burp burp-extensions burp-plugin burpsuite sqlinject sqlinjection sqlinjectionattack

Last synced: 31 Oct 2025

https://github.com/bayotop/sink-logger

Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.

burp burp-extensions domxss javascript jython

Last synced: 19 Apr 2025

https://github.com/silentsignal/burp-uuid

UUID issues for Burp Suite

burp uuid

Last synced: 21 Jan 2026

https://github.com/twelvesec/BearerAuthToken

This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.

authorization burp burp-extensions burpsuite burpsuite-extender

Last synced: 19 Apr 2025

https://github.com/tijme/similar-request-excluder

A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.

burp burpsuite effectiveness efficiency extension http improvement measure response similarity suite

Last synced: 19 Apr 2025

https://github.com/ricardojba/poi-slinger

Automatically identify serialization issues in PHP Frameworks by means of an Burp Suite active scan

burp burp-extensions burp-plugin burpsuite burpsuite-extender burpsuite-pro burpsuitepro

Last synced: 19 Apr 2025

https://github.com/silentsignal/burp-json-jtree

JSON JTree viewer for Burp Suite

burp json

Last synced: 21 Jan 2026

https://github.com/netspi/jsonbeautifier

JSON Beautifier for Burp written in Java

burp extension json-beautifier netspi

Last synced: 16 Jul 2025

https://github.com/NetSPI/JSONBeautifier

JSON Beautifier for Burp written in Java

burp extension json-beautifier netspi

Last synced: 19 Apr 2025

https://github.com/ariary/httpcustomhouse

HTTP request smuggling attack helper/CLI tools to manipulate HTTP packets

bug-bounty burp cli http-client http-request-smuggling infosec learning pentest-tool request-smuggling security websecurity

Last synced: 26 Apr 2025

https://github.com/silentsignal/burp-collab-gw

Simple socket-based gateway to the Burp Collaborator

burp messagepack

Last synced: 21 Jan 2026

https://github.com/gosecure/burp-ntlm-challenge-decoder

Burp extension to decode NTLM SSP headers and extract domain/host information

burp extension ntlm osint recon security ssp windows

Last synced: 05 Apr 2025

https://github.com/rip1s/ctfhelper

A simple Burp extension for scanning stuffs in CTF

burp burp-extensions ctf

Last synced: 29 Jun 2025

https://github.com/zidekmat/graphql_beautifier

Burp Suite extension to help make Graphql request more readable

burp burp-extensions burpsuite graphql

Last synced: 02 Apr 2025

https://github.com/rip1s/CTFHelper

A simple Burp extension for scanning stuffs in CTF

burp burp-extensions ctf

Last synced: 19 Apr 2025

https://github.com/augustd/burp-suite-software-version-checks

Burp extension to passively scan for applications revealing software version numbers

burp burp-extensions burp-plugin burpsuite java penetration-testing pentest scanning

Last synced: 16 Jan 2026

https://github.com/vah13/BurpCRLFPlugin

Another plugin for CRLF vulnerability detection

bugbounty burp crlf plugin scanner vulnerability-detection

Last synced: 13 Mar 2025

https://github.com/xcanwin/xburpcrack

绕过burp破解版的截止日期限制. This is a tool to bypass the cracked version of the burpsuite_pro(Larry_Lau) certification deadline through time reversal.

burp crack

Last synced: 24 Oct 2025

https://github.com/xcanwin/XBurpCrack

绕过burp破解版的截止日期限制. This is a tool to bypass the cracked version of the burpsuite_pro(Larry_Lau) certification deadline through time reversal.

burp crack

Last synced: 13 Mar 2025

https://github.com/belane/burpcert-magisk-module

Magisk module that adds the Burp certificate to the system's root CA store

android burp magisk magisk-module

Last synced: 12 Jul 2026

https://github.com/augustd/burp-suite-utils

Utilities for creating Burp Suite Extensions.

burp burp-api burp-extensions burp-plugin burpsuite java

Last synced: 16 Jan 2026

https://github.com/anvilsecure/aws-sigv4

Anvil Secure's Burp extension for signing AWS requests with SigV4

aws aws-sigv4 burp burp-extensions signing sigv4

Last synced: 10 Apr 2025

https://github.com/f0ng/text4shellburpscanner

text4shell(CVE-2022-42889) BurpSuite Scanner

burp burp-extensions

Last synced: 01 Jul 2025

https://github.com/nscuro/bradamsa-ng

Burp Suite extension for Radamsa-powered fuzzing with Intruder

bradamsa burp burp-extensions burpsuite fuzzing intruder radamsa windows-subsystem-for-linux wsl

Last synced: 11 Jul 2025

https://github.com/augustd/burp-suite-swaggy

Burp Suite extension for parsing Swagger web service definition files

burp burp-extensions burp-plugin burpsuite java penetration-testing pentest swagger

Last synced: 16 Jan 2026

https://github.com/silentsignal/burp-cfurl-cache

CFURL Cache inspector for Burp Suite

burp ios

Last synced: 21 Jan 2026

https://github.com/shahidcodes/android-nougat-ssl-intercept

It decompiles target apk and adds security exception to accept all certificates thus making able to work with Burp/Charles and Other Tools

android apk burp certificates charles charles-proxy intercept interception-httphttps-request interceptor ssl ssl-certificates

Last synced: 05 Sep 2025

https://github.com/mrts/burp-suite-http-proxy-history-viewer

Burp Suite HTTP proxy history viewer

burp javafx

Last synced: 31 Aug 2025

https://github.com/anandtiwarics/python-burp-rest-api

Python Package for burprestapi

burp python restful

Last synced: 15 Aug 2025

https://github.com/bao7uo/waf-cookie-fetcher

WAF Cookie Fetcher is a Burp Suite extension written in Python, which uses a headless browser to obtain the values of WAF-injected cookies which are calculated in the browser by client-side JavaScript code and adds them to Burp's cookie jar. Requires PhantomJS.

burp burp-api burp-extensions burpsuite-pro bypass-wafs cookies

Last synced: 21 Nov 2025

https://github.com/hvqzao/burp-token-rewrite

Burp extension for automated handling of CSRF tokens

burp burp-extensions burp-plugin burpsuite csrf-tokens

Last synced: 19 Apr 2025

https://github.com/pschiffe/docker-burp

Server, client and web ui Docker images for Burp

backup burp burp-client burp-server burp-ui docker docker-compose docker-images encryption rsync

Last synced: 24 Apr 2025

https://github.com/augustd/burp-suite-gwt-scan

Burp Suite plugin identifies insertion points for GWT (Google Web Toolkit) requests

burp burp-extensions burp-plugin burpsuite gwt java penetration-testing pentest

Last synced: 16 Jan 2026

https://github.com/helloexp/burpsuiteplugin

编写 burp suite 插件

burp burp-plugin burpsuite

Last synced: 01 Mar 2026

https://github.com/Ebryx/SRePlay

Burpsuite Plugin to bypass strict RePlay protection

burp burp-extensions burp-plugin burpsuite burpsuite-extender burpsuite-tools

Last synced: 11 Jul 2025

https://github.com/madneal/r-forwarder-burp

The burp extension to forward the request

burp burp-extensions java

Last synced: 23 Apr 2025

https://github.com/andresriancho/burp-proxy-search

Burp suite HTTP history advanced search

burp scanning search security statistics

Last synced: 10 Apr 2025

https://github.com/thomashartm/burp-domsink-logger

Injects a trusted types policy into an HTML page to log all DOM sinks whenever HTML is written into the DOM.

burp burp-extensions burp-plugin burpsuite-extender cross-site-scripting domxss java javascript penetration-testing-tools security-testing security-tools trusted-types

Last synced: 23 Mar 2025

https://github.com/sampsonc/AuthHeaderUpdater

Burp extension to specify the token value for the Authenication header while scanning.

burp burp-extensions burpsuite

Last synced: 19 Apr 2025

https://github.com/ax/burp-logs

Logs is a Burp Suite extension to work with log files.

burp burp-extensions burp-logs burp-plugin burpsuite import log logs parser reader

Last synced: 03 Jul 2025