Repositories list

• sticky-burp

  Public
  A Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing. Built with the Montoya API and modern Kotlin tooling.

  Kotlin

  •

  Apache License 2.0

  •1•0•0•0•Updated Mar 3, 2025Mar 3, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •15•136•2•1•Updated Mar 3, 2025Mar 3, 2025

• extension-template-project

  Public
  A ready-to-use extension template to help you start writing your extension immediately.

  Java

  •0•0•0•1•Updated Mar 3, 2025Mar 3, 2025

• backslash-powered-scanner

  Public
  Finds unknown classes of injection vulnerabilities

  Java

  •

  Other

  •95•652•3•0•Updated Mar 3, 2025Mar 3, 2025

• html-content-extractor

  Public
  Burp extension to filter HTML elements on the fly with CSS selectors in the HTTP message viewer.

  Java

  •1•1•0•0•Updated Feb 28, 2025Feb 28, 2025

• timestamp-injector

  Public
  Burp Suite Extension to inject timestamps into HTTP requests

  Java

  •

  Apache License 2.0

  •1•1•0•0•Updated Feb 27, 2025Feb 27, 2025

• burp-variables

  Public
  Burp Suite extension that extends Burp to support storing and reusing variables in requests

  Java

  •

  MIT License

  •1•3•0•0•Updated Feb 27, 2025Feb 27, 2025

• raw-hexler

  Public
  Java

  •1•1•0•0•Updated Feb 27, 2025Feb 27, 2025

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

  GNU Lesser General Public License v3.0

  •120•669•28•0•Updated Feb 25, 2025Feb 25, 2025

• java-object-deserializer

  Public
  BurpJDSer-ng

  Java

  •13•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• shadow-repeater

  Public
  Java

  •4•6•0•0•Updated Feb 24, 2025Feb 24, 2025

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •221•1.6k•14•1•Updated Feb 24, 2025Feb 24, 2025

• spoofproof

  Public
  Java

  •

  MIT License

  •2•6•0•0•Updated Feb 24, 2025Feb 24, 2025

• ai-http-analyzer

  Public
  AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innovative extension harnesses the power of AI to automate vulnerability detection, provide intelligent analysis, and assist security professionals in identifying complex security issues.

  Java

  •

  MIT License

  •9•10•0•3•Updated Feb 19, 2025Feb 19, 2025

• hackvertor

  Public
  Java

  •50•90•0•0•Updated Feb 14, 2025Feb 14, 2025

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •8•157•11•0•Updated Feb 13, 2025Feb 13, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •34•245•2•1•Updated Feb 13, 2025Feb 13, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•3•0•0•Updated Feb 12, 2025Feb 12, 2025

• enterprise-helm-charts

  Public
  Helm charts for BSEE Kubernetes installation.

  kubernetesenterpriseburp+ 1helm-chart

  Smarty

  •

  Apache License 2.0

  •6•4•2•2•Updated Feb 12, 2025Feb 12, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2•7•0•2•Updated Feb 10, 2025Feb 10, 2025

• url-cheatsheet-data

  Public
  This is the data that powers the PortSwigger URL validation bypass cheat sheet.

  JavaScript

  •6•37•3•0•Updated Feb 5, 2025Feb 5, 2025

• param-miner

  Public
  Java

  •

  Other

  •169•1.3k•19•5•Updated Feb 3, 2025Feb 3, 2025

• javascript-encode-as

  Public
  Basic Burp Plugin to allow encoding strings to JavaScript encodings (Unicode/Hex).

  Python

  •

  MIT License

  •1•1•0•0•Updated Jan 31, 2025Jan 31, 2025

• license-title-cleaner

  Public
  Removing " - licensed to .*" from Burp window title

  Java

  •1•0•0•0•Updated Jan 31, 2025Jan 31, 2025

• collabfiltrator

  Public
  Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

  Java

  •

  GNU General Public License v3.0

  •56•6•0•0•Updated Jan 31, 2025Jan 31, 2025

• pesd-exporter

  Public
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams

  HTML

  •

  Apache License 2.0

  •8•5•0•0•Updated Jan 30, 2025Jan 30, 2025

• bypass-bot-detection

  Public
  Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

  Java

  •

  Apache License 2.0

  •12•301•0•0•Updated Jan 29, 2025Jan 29, 2025

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  Kotlin

  •1•0•0•0•Updated Jan 29, 2025Jan 29, 2025

• aws-signer

  Public
  Burp Extension for AWS Signing

  Java

  •

  MIT License

  •38•6•0•0•Updated Jan 29, 2025Jan 29, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •192•214•0•1•Updated Jan 28, 2025Jan 28, 2025