39 Open Source Burpsuite Extender Software Projects

一个用于前端加密Fuzz的Burp Suite插件

Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】

一个可快速“搬运”cookie的Burp Suite插件

Burp Suite Professional extension in Java for Tabnabbing attack

It becomes the extension of Burp suite. The cookie set by the BipIP server may include a private IP, which is an extension to detect that IP

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)

HackBar plugin for Burpsuite

Burp Plugin to decrypt AES encrypted traffic on the fly

Piper Burp Suite Extender plugin

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities

Burp suite 分块传输辅助插件

GQL Burp Extension

Burp Suite JSON/JS-Beautifier

Burp被动扫描流量转发插件

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

Burpsuite-Plugins-Usage

Automatically identify serialization issues in PHP Frameworks by means of an Burp Suite active scan

burp验证码识别接口调用插件

Burp Suite extension to discover apikeys/accesstokens and sensitive data from HTTP response.

A Burp Suite Extension to take back your repeater tabs

A Burp plugin that collects Burp request parameters, directories, paths and file names into the database for sorting

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Messy BurpSuite plugin for SQL Truncation vulnerabilities.

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

The objective of this Burp Suite extension is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite project as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests using Python scripts. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected by Burp Suite.

HaE-Java是基于Java开发的一款burpsuite插件，其支持自定义正则表达式，可扩展性强，并内置九种高亮颜色，可高亮（Highlight）标记敏感请求，并（And）提取（Extract）关键数据，方便后续深度挖掘。代码内部维护了一个简单的缓存池，burp界面响应速度佳。

Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

基于Burp插件开发打造渗透测试自动化

A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration

Toggle Burp proxy from anywhere and get its status in i3wm

RegexFinder - Burp Suite extension to passively scan responses for occurrence of regular expression patterns.

burpsuite插件：主动和被动进行JS扫描并分析其中的可利用点

Burpsuite插件：被动进行未授权访问或越权操作的扫描

Burpsuite Plugin to detect Directory Traversal vulnerabilities

Log4Shell scanner for Burp Suite

This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.

A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件