Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite

Hands-on projects for beginners to learn and practice essential cybersecurity skills through security assessments.

Beginner-friendly web penetration testing projects for hands-on learning.

All Apprentice and Practitioner-level Portswigger labs

Battle Cats MITM Mailbox Hack

Lightweight BApp that seamlessly integrates powerful LLM-scanning capabilities into Burp's built-in Scanner with improved accuracy. Supports the latest LLMs from OpenAI (gpt-4o, o1), Anthropic (Claude 3.5, Claude 3), and Google (Gemini 1.5). Requires valid API key(s) and an active Burp Suite Pro or Enterprise license.

A Collection of penetration testing and Linux administration commands in PDFs. Include's detailed guides on tools like Nmap, Sqlmap, Hydra, and Linux system management etc..

HTTP session viewer

This repository documents my journey through a junior penetration testing course, showcasing hands-on skills in web hacking, network security, and vulnerability research. It's designed to illustrate my learning progress and practical expertise for potential cybersecurity career opportunities.

Open Redirect Hunter is a Burp Suite extension designed to automatically detect open redirect vulnerabilities in web applications.

A thorough resource encompassing fundamental and advanced cybersecurity topics, including Web App Pen Testing concepts, interview questions and answers, network security principles, essential networking knowledge, security insights, practical tools, and threat intelligence techniques like OSINT. Free cybersecurity resources.

Add a local REST API to Burp Suite Pro for instant, scriptable control of proxy, scanning, and scope.

A powerful Python tool for identifying Insecure Direct Object Reference (IDOR) vulnerabilities in Burp Suite traffic exports.

This cheatsheet contains techniques, commands, and tools commonly used during web application penetration tests. It provides quick references to common vulnerabilities, exploitation techniques, and tools used in modern web application attacks.

A powerful Python tool for identifying Insecure Direct Object Reference (IDOR) vulnerabilities in Burp Suite traffic exports.

gamezone tryhackme understanding sqlmap,hashcracking,ssh tunnel and priviledge escalation

💻 Kali Linux ile gerçek zamanlı DVWA Pentest Projesi • SQL Injection, XSS, Command Injection & Hydra 🔍