Repositories list

• param-miner

  Public
  Java

  •

  Other

  •170•1.3k•19•5•Updated Jan 24, 2025Jan 24, 2025

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

  Java

  •

  Apache License 2.0

  •13•23•0•0•Updated Jan 24, 2025Jan 24, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •191•212•0•1•Updated Jan 23, 2025Jan 23, 2025

• enterprise-reference-stack-for-aws

  Public
  Smarty

  •

  Apache License 2.0

  •7•11•0•0•Updated Jan 21, 2025Jan 21, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•7•0•2•Updated Jan 20, 2025Jan 20, 2025

• customizer

  Public
  Because just a dark theme wasn't enough!

  Java

  •

  GNU Affero General Public License v3.0

  •47•2•0•0•Updated Jan 15, 2025Jan 15, 2025

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •12•271•0•0•Updated Jan 15, 2025Jan 15, 2025

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  Python

  •

  MIT License

  •26•8•0•0•Updated Jan 15, 2025Jan 15, 2025

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •221•1.5k•14•1•Updated Jan 10, 2025Jan 10, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•2•0•0•Updated Jan 9, 2025Jan 9, 2025

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •5•4•2•2•Updated Jan 9, 2025Jan 9, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •34•223•1•2•Updated Jan 9, 2025Jan 9, 2025

• trusted-types-checker

  Public
  Python

  •1•0•0•0•Updated Jan 8, 2025Jan 8, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •76•30•0•0•Updated Jan 6, 2025Jan 6, 2025

• http-request-smuggler

  Public
  Java

  •

  Other

  •104•967•7•2•Updated Jan 6, 2025Jan 6, 2025

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  Kotlin

  •1•0•0•0•Updated Jan 3, 2025Jan 3, 2025

• scoper

  Public
  This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.

  Java

  •

  GNU General Public License v3.0

  •13•0•0•0•Updated Jan 2, 2025Jan 2, 2025

• burp-variables

  Public
  Burp Suite extension that extends Burp to support storing and reusing variables in requests

  Java

  •

  MIT License

  •1•0•0•0•Updated Dec 29, 2024Dec 29, 2024

• license-title-cleaner

  Public
  Removing " - licensed to .*" from Burp window title

  Java

  •1•0•0•0•Updated Dec 23, 2024Dec 23, 2024

• go-ocsp-responder

  Public
  OCSP responder written in Go meant to be used with PortSwigger's CertSquirt solution

  Go

  •

  MIT License

  •11•2•0•0•Updated Dec 17, 2024Dec 17, 2024

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •7•153•11•0•Updated Dec 16, 2024Dec 16, 2024

• content-type-converter

  Public
  Central Repo for Burp extensions

  Java

  •54•22•0•0•Updated Dec 13, 2024Dec 13, 2024

• hackvertor

  Public
  Java

  •50•88•0•0•Updated Dec 13, 2024Dec 13, 2024

• batch-scan-report-generator

  Public
  Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only.

  Java

  •

  MIT License

  •2•4•0•0•Updated Dec 12, 2024Dec 12, 2024

• sign-saboteur

  Public
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens

  Java

  •

  Apache License 2.0

  •11•3•0•0•Updated Dec 5, 2024Dec 5, 2024

• oauth-scan

  Public
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security

  Java

  •

  GNU General Public License v3.0

  •26•186•0•0•Updated Dec 3, 2024Dec 3, 2024

• saml-encoder-decoder

  Public
  Python

  •6•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  GNU Lesser General Public License v3.0

  •117•656•28•0•Updated Dec 2, 2024Dec 2, 2024

• autorize

  Public
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

  Python

  •208•230•0•0•Updated Nov 29, 2024Nov 29, 2024

• cstc

  Public
  CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

  Java

  •

  GNU General Public License v3.0

  •27•8•0•0•Updated Nov 29, 2024Nov 29, 2024