Repositories list

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •222•1.6k•15•1•Updated Feb 14, 2025Feb 14, 2025

• hackvertor

  Public
  Java

  •50•89•0•0•Updated Feb 14, 2025Feb 14, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •14•130•2•0•Updated Feb 13, 2025Feb 13, 2025

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •8•155•11•0•Updated Feb 13, 2025Feb 13, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •34•236•1•1•Updated Feb 13, 2025Feb 13, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•2•0•0•Updated Feb 12, 2025Feb 12, 2025

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •6•4•2•2•Updated Feb 12, 2025Feb 12, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•7•0•2•Updated Feb 10, 2025Feb 10, 2025

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  GNU Lesser General Public License v3.0

  •119•661•28•0•Updated Feb 10, 2025Feb 10, 2025

• burp-variables

  Public
  Burp Suite extension that extends Burp to support storing and reusing variables in requests

  Java

  •

  MIT License

  •1•0•0•0•Updated Feb 5, 2025Feb 5, 2025

• url-cheatsheet-data

  Public
  This is the data that powers the PortSwigger URL validation bypass cheat sheet.

  JavaScript

  •6•36•3•0•Updated Feb 5, 2025Feb 5, 2025

• param-miner

  Public
  Java

  •

  Other

  •169•1.3k•19•5•Updated Feb 3, 2025Feb 3, 2025

• javascript-encode-as

  Public
  Basic Burp Plugin to allow encoding strings to JavaScript encodings (Unicode/Hex).

  Python

  •

  MIT License

  •1•0•0•0•Updated Jan 31, 2025Jan 31, 2025

• license-title-cleaner

  Public
  Removing " - licensed to .*" from Burp window title

  Java

  •1•0•0•0•Updated Jan 31, 2025Jan 31, 2025

• collabfiltrator

  Public
  Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

  Java

  •

  GNU General Public License v3.0

  •56•6•0•0•Updated Jan 31, 2025Jan 31, 2025

• pesd-exporter

  Public
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams

  HTML

  •

  Apache License 2.0

  •8•5•0•0•Updated Jan 30, 2025Jan 30, 2025

• timestamp-injector

  Public
  Burp Suite Extension to inject timestamps into HTTP requests

  Java

  •

  Apache License 2.0

  •1•0•0•0•Updated Jan 30, 2025Jan 30, 2025

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •12•286•0•0•Updated Jan 29, 2025Jan 29, 2025

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  Kotlin

  •1•0•0•0•Updated Jan 29, 2025Jan 29, 2025

• aws-signer

  Public
  Burp Extension for AWS Signing

  Java

  •

  MIT License

  •38•6•0•0•Updated Jan 29, 2025Jan 29, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •192•214•0•1•Updated Jan 28, 2025Jan 28, 2025

• spoofproof

  Public
  Java

  •

  MIT License

  •2•0•0•0•Updated Jan 24, 2025Jan 24, 2025

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

  Java

  •

  Apache License 2.0

  •14•26•0•0•Updated Jan 24, 2025Jan 24, 2025

• enterprise-reference-stack-for-aws

  Public
  Smarty

  •

  Apache License 2.0

  •7•11•0•0•Updated Jan 21, 2025Jan 21, 2025

• customizer

  Public
  Because just a dark theme wasn't enough!

  Java

  •

  GNU Affero General Public License v3.0

  •47•2•0•0•Updated Jan 15, 2025Jan 15, 2025

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  Python

  •

  MIT License

  •26•8•0•0•Updated Jan 15, 2025Jan 15, 2025

• trusted-types-checker

  Public
  Python

  •1•0•0•0•Updated Jan 8, 2025Jan 8, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •76•30•0•0•Updated Jan 6, 2025Jan 6, 2025

• http-request-smuggler

  Public
  Java

  •

  Other

  •103•969•8•2•Updated Jan 6, 2025Jan 6, 2025

• scoper

  Public
  This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.

  Java

  •

  GNU General Public License v3.0

  •13•0•0•0•Updated Jan 2, 2025Jan 2, 2025