39 Open Source Burpsuite Extender Software Projects

HackBar plugin for Burpsuite

Burp suite 分块传输辅助插件

This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)

A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

一个用于前端加密Fuzz的Burp Suite插件

Burp被动扫描流量转发插件

Burp Suite extension to discover apikeys/accesstokens and sensitive data from HTTP response.

Burp Plugin to decrypt AES encrypted traffic on the fly

Burpsuite-Plugins-Usage

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

burp验证码识别接口调用插件

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities

Piper Burp Suite Extender plugin

A Burp Suite Extension to take back your repeater tabs

Messy BurpSuite plugin for SQL Truncation vulnerabilities.

This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.

A Burp plugin that collects Burp request parameters, directories, paths and file names into the database for sorting

HaE-Java是基于Java开发的一款burpsuite插件，其支持自定义正则表达式，可扩展性强，并内置九种高亮颜色，可高亮（Highlight）标记敏感请求，并（And）提取（Extract）关键数据，方便后续深度挖掘。代码内部维护了一个简单的缓存池，burp界面响应速度佳。

Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

The objective of this Burp Suite extension is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite project as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests using Python scripts. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected by Burp Suite.

一个可快速“搬运”cookie的Burp Suite插件

Automatically identify serialization issues in PHP Frameworks by means of an Burp Suite active scan

GQL Burp Extension

Burp Suite Professional extension in Java for Tabnabbing attack

It becomes the extension of Burp suite. The cookie set by the BipIP server may include a private IP, which is an extension to detect that IP

A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration

Burpsuite插件：被动进行未授权访问或越权操作的扫描

burpsuite插件：主动和被动进行JS扫描并分析其中的可利用点

Burpsuite Plugin to detect Directory Traversal vulnerabilities

Burp Suite JSON/JS-Beautifier

Toggle Burp proxy from anywhere and get its status in i3wm

RegexFinder - Burp Suite extension to passively scan responses for occurrence of regular expression patterns.

Log4Shell scanner for Burp Suite

基于Burp插件开发打造渗透测试自动化