Repositories list

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •12•273•0•0•Updated Jan 29, 2025Jan 29, 2025

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  Kotlin

  •1•0•0•0•Updated Jan 29, 2025Jan 29, 2025

• aws-signer

  Public
  Burp Extension for AWS Signing

  Java

  •

  MIT License

  •38•6•0•0•Updated Jan 29, 2025Jan 29, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •191•212•0•1•Updated Jan 28, 2025Jan 28, 2025

• param-miner

  Public
  Java

  •

  Other

  •169•1.3k•19•5•Updated Jan 28, 2025Jan 28, 2025

• pesd-exporter

  Public
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams

  HTML

  •

  Apache License 2.0

  •8•4•0•0•Updated Jan 27, 2025Jan 27, 2025

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

  Java

  •

  Apache License 2.0

  •13•23•0•0•Updated Jan 24, 2025Jan 24, 2025

• enterprise-reference-stack-for-aws

  Public
  Smarty

  •

  Apache License 2.0

  •7•11•0•0•Updated Jan 21, 2025Jan 21, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•7•0•2•Updated Jan 20, 2025Jan 20, 2025

• customizer

  Public
  Because just a dark theme wasn't enough!

  Java

  •

  GNU Affero General Public License v3.0

  •47•2•0•0•Updated Jan 15, 2025Jan 15, 2025

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  Python

  •

  MIT License

  •26•8•0•0•Updated Jan 15, 2025Jan 15, 2025

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •222•1.5k•14•1•Updated Jan 10, 2025Jan 10, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•2•0•0•Updated Jan 9, 2025Jan 9, 2025

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •5•4•2•2•Updated Jan 9, 2025Jan 9, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •34•223•1•2•Updated Jan 9, 2025Jan 9, 2025

• trusted-types-checker

  Public
  Python

  •1•0•0•0•Updated Jan 8, 2025Jan 8, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •76•30•0•0•Updated Jan 6, 2025Jan 6, 2025

• http-request-smuggler

  Public
  Java

  •

  Other

  •103•967•7•2•Updated Jan 6, 2025Jan 6, 2025

• scoper

  Public
  This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.

  Java

  •

  GNU General Public License v3.0

  •13•0•0•0•Updated Jan 2, 2025Jan 2, 2025

• burp-variables

  Public
  Burp Suite extension that extends Burp to support storing and reusing variables in requests

  Java

  •

  MIT License

  •1•0•0•0•Updated Dec 29, 2024Dec 29, 2024

• license-title-cleaner

  Public
  Removing " - licensed to .*" from Burp window title

  Java

  •1•0•0•0•Updated Dec 23, 2024Dec 23, 2024

• go-ocsp-responder

  Public
  OCSP responder written in Go meant to be used with PortSwigger's CertSquirt solution

  Go

  •

  MIT License

  •11•2•0•0•Updated Dec 17, 2024Dec 17, 2024

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •7•154•11•0•Updated Dec 16, 2024Dec 16, 2024

• content-type-converter

  Public
  Central Repo for Burp extensions

  Java

  •54•22•0•0•Updated Dec 13, 2024Dec 13, 2024

• hackvertor

  Public
  Java

  •50•88•0•0•Updated Dec 13, 2024Dec 13, 2024

• batch-scan-report-generator

  Public
  Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only.

  Java

  •

  MIT License

  •2•4•0•0•Updated Dec 12, 2024Dec 12, 2024

• sign-saboteur

  Public
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens

  Java

  •

  Apache License 2.0

  •11•3•0•0•Updated Dec 5, 2024Dec 5, 2024

• oauth-scan

  Public
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security

  Java

  •

  GNU General Public License v3.0

  •26•186•0•0•Updated Dec 3, 2024Dec 3, 2024

• saml-encoder-decoder

  Public
  Python

  •6•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  GNU Lesser General Public License v3.0

  •117•657•28•0•Updated Dec 2, 2024Dec 2, 2024