Repositories list

• url-cheatsheet-data

  Public
  This is the data that powers the PortSwigger URL validation bypass cheat sheet.

  JavaScript

  •4•24•1•0•Updated Oct 18, 2024Oct 18, 2024

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•2•0•0•Updated Oct 18, 2024Oct 18, 2024

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •4•3•2•3•Updated Oct 18, 2024Oct 18, 2024

• look-over-there

  Public
  Python

  •3•1•0•0•Updated Oct 17, 2024Oct 17, 2024

• cache-killer

  Public
  Java

  •0•0•0•0•Updated Oct 17, 2024Oct 17, 2024

• qualys-was

  Public
  Qualys' Burp Extension for WAS

  Java

  •3•4•0•0•Updated Oct 16, 2024Oct 16, 2024

• host-header-inchecktion

  Public
  A burp extention to find host header injection vulnerabilities

  Java

  •4•3•0•0•Updated Oct 15, 2024Oct 15, 2024

• content-type-converter

  Public
  Central Repo for Burp extensions

  Java

  •53•22•0•0•Updated Oct 11, 2024Oct 11, 2024

• param-miner

  Public
  Java

  •

  Other

  •166•1.2k•19•6•Updated Oct 10, 2024Oct 10, 2024

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •207•1.5k•13•1•Updated Oct 9, 2024Oct 9, 2024

• websocket-turbo-intruder

  Public
  Fuzz WebSockets with custom Python code

  Java

  •

  MIT License

  •1•1•0•0•Updated Oct 9, 2024Oct 9, 2024

• prototype-pollution-gadgets-finder

  Public
  Python

  •3•0•0•0•Updated Oct 9, 2024Oct 9, 2024

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•6•0•1•Updated Oct 7, 2024Oct 7, 2024

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  GNU Lesser General Public License v3.0

  •110•625•25•2•Updated Oct 4, 2024Oct 4, 2024

• splitting-the-email-atom

  Public
  HTML

  •5•62•0•0•Updated Oct 4, 2024Oct 4, 2024

• copy-request-response

  Public
  Burp extension for quickly copying request/response data.

  Java

  •17•8•0•0•Updated Sep 27, 2024Sep 27, 2024

• research-labs

  Public
  This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities found by Portswigger Research team.

  TypeScript

  •

  Apache License 2.0

  •0•13•0•0•Updated Sep 27, 2024Sep 27, 2024

• json-escaper

  Public
  Python

  •

  MIT License

  •5•2•0•0•Updated Sep 24, 2024Sep 24, 2024

• copy-as-python-requests

  Public
  Copy as requests plugin for Burp Suite

  Java

  •

  MIT License

  •24•61•0•0•Updated Sep 24, 2024Sep 24, 2024

• reshaper

  Public
  Burp Suite Extension - Trigger actions and reshape HTTP request and response traffic using configurable rules

  Java

  •

  MIT License

  •12•15•0•0•Updated Sep 23, 2024Sep 23, 2024

• display-switcher

  Public
  Repository for the DisplaySwitcher Burp Suite extension

  Java

  •1•0•0•0•Updated Sep 20, 2024Sep 20, 2024

• autorize

  Public
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

  Python

  •196•215•0•0•Updated Sep 18, 2024Sep 18, 2024

• batch-scan-report-generator

  Public
  Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only.

  Java

  •

  MIT License

  •2•4•0•0•Updated Sep 18, 2024Sep 18, 2024

• nuclei-template-generator

  Public
  Nuclei plugin for BurpSuite

  Java

  •

  MIT License

  •114•13•0•0•Updated Sep 18, 2024Sep 18, 2024

• pyburp

  Public
  BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the Burp Suite proxy using Jython code or gRPC, especially when dealing with encrypted requests.

  Java

  •7•7•0•0•Updated Sep 18, 2024Sep 18, 2024

• padding-oracle-hunter

  Public
  Python

  •

  MIT License

  •6•8•0•0•Updated Sep 13, 2024Sep 13, 2024

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

  Java

  •

  Apache License 2.0

  •10•20•0•0•Updated Sep 13, 2024Sep 13, 2024

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •73•27•0•0•Updated Sep 13, 2024Sep 13, 2024

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •9•200•0•0•Updated Sep 4, 2024Sep 4, 2024

• copy-as-python-aiohttp

  Public
  Copy as aiohttp extension for Burp Suite

  Java

  •

  MIT License

  •1•0•0•0•Updated Sep 2, 2024Sep 2, 2024