Awesome Open Source

Programming Languages

Search results for burpsuite

274 search results found

Yakit ⭐ 5,790

Cyber Security ALL-IN-ONE Platform

Faraday ⭐ 4,422

Open Source Vulnerability Management Platform

Intruderpayloads ⭐ 3,526

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Burpsuite Collections ⭐ 2,914

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解 of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

Burpgpt ⭐ 1,725

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.

Burpbounty ⭐ 1,586

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

Nope Proxy ⭐ 1,507

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Hackbar ⭐ 1,469

HackBar plugin for Burpsuite

Knife ⭐ 1,401

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Burpsuite_403bypasser ⭐ 1,366

Burpsuite Extension to bypass 403 restricted directory

Burpsuite For Pentester ⭐ 1,340

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

Byp4xx ⭐ 1,296

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

Burpsuitepro 2.1 ⭐ 1,164

什么? 你想用免费的BurpSuitePro版本!!!

Ethical Hacking Tools ⭐ 1,159

Complete Listing and Usage of Tools used for Ethical Hacking

Burpcrypto ⭐ 1,137

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

Burpshiropassivescan ⭐ 1,107

一款基于BurpSuite的被动式shiro检测插件

Autorize ⭐ 843

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

Autorepeater ⭐ 791

Automated HTTP Request Repeating With Burp Suite

Recaptcha ⭐ 789

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

Iprotate_burp_extension ⭐ 768

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

Burp Awesome Tls ⭐ 758

Fixes Burp Suite's poor TLS stack. Bypass WAF, spoof any browser.

Reconaizer ⭐ 695

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

Burpfastjsonscan ⭐ 683

一款基于BurpSuite的被动式FastJson检测插件

Burpsuitehttpsmuggler ⭐ 680

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

Aes Killer ⭐ 618

Burp Plugin to decrypt AES encrypted traffic on the fly

Quick SQLMap Tamper Suggester

Awesome Burp Suite ⭐ 506

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

Burp Rest Api ⭐ 488

REST/JSON API to the Burp Suite security tool.

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Burp Log4shell ⭐ 472

Log4Shell scanner for Burp Suite

Burpsuite Plugins Usage ⭐ 470

Burpsuite-Plugins-Usage

Miscellaneous ⭐ 403

Samuraiwtf ⭐ 383

The main SamuraiWTF collaborative distro repo.

myscan 被动扫描

Burp_suite_doc_zh_cn ⭐ 366

这是基于Burp Suite官方文档翻译而来的中文版文档

Vulnrepo ⭐ 364

VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, issues import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, methodologies and much more!

Commodity Injection Signatures ⭐ 364

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

CaA - BurpSuite Collector and Analyzer

Kalirouter ⭐ 360

intercepting kali router

Cve 2020 5902 ⭐ 352

CVE-2020-5902 BIG-IP

Rescope ⭐ 298

A scope generation tool for Burp Suite & ZAP

Burpsuitecn ⭐ 297

Burp Suite 汉化中文

Agartha ⭐ 292

a burp extension creates dynamic payloads to reveal injection flaws(LFI, RCE, SQLi), generates user access tables to spot authentication/authorization issues, and copys Http requests as JavaScript code.

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support

Burp2malleable ⭐ 278

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

luna webscanner

Faster xss scanner,support reflected-xss and dom-xss

Match Replace Burp ⭐ 262

Useful "Match and Replace" burpsuite rules

Webtech ⭐ 247

Identify technologies used on websites.

Sqlmap4burp ⭐ 242

sqlmap embed in burpsuite

Vaf is a cross-platform very advanced and fast web fuzzer written in nim

Vulnerableapp ⭐ 236

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

Jspector ⭐ 231

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

Cve 2020 14882 ⭐ 223

CVE-2020–14882、CVE-2020–14883

Headless Burp ⭐ 221

Automate security tests using Burp Suite.

Pwnback ⭐ 216

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

Cervantes ⭐ 215

Cervantes is an opensource collaborative platform for pentesters or red teams who want to save time to manage their projects, clients, vulnerabilities and reports in one place.

Content Bruteforcing Wordlist ⭐ 210

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

Pen Andro ⭐ 206

Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

Off By Slash ⭐ 206

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

Minesweeper ⭐ 188

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

A plugin that allows you execute python and get return to BurpSuite.

Personal_script ⭐ 179

Tryhackme Ctf ⭐ 178

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

Openapi Parser ⭐ 177

Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

Pycript ⭐ 153

Burp Suite extension for bypassing client-side encryption using custom logic for pentesting and bug bounty

Upload Labs Writeup ⭐ 152

upload-labs writeup

Auth_analyzer ⭐ 146

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

Frida Intercept Encrypted Api ⭐ 142

A tool to help you intercept encrypted APIs in iOS or Android apps

Burp Exporter ⭐ 140

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

Ctf_hacker Tools ⭐ 140

CTF-渗透测试~工具合集

Research ⭐ 133

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

Backup Finder ⭐ 129

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

How To Play Ctf ⭐ 128

CTF入門建議

Burp Send To ⭐ 128

Adds a customizable "Send to..."-context-menu to your BurpSuite.

Privatecollaborator ⭐ 121

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】

承影 - 一款安全工具箱,集成了目录扫描、JWT、Swagger 测试、编/解码、轻量级 BurpSuite、杀软辅助功能

Admin Panel_finder ⭐ 110

A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)

Burp Suite Pro ⭐ 109

A bash and powershell script to download the latest version of Burp-Suite Professional and use it for free.

Burp Vps Proxy ⭐ 107

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

Burpdeveltraining ⭐ 104

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

Burp Molly Pack ⭐ 102

Security checks pack for Burp Suite

Bitblinder ⭐ 101

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities

Oa Tongda Rce ⭐ 101

Office Anywhere网络智能办公系统

Burp Bounty Profiles ⭐ 101

Burp Bounty profiles compilation, feel free to contribute!

Android Analysis ⭐ 98

Getting Genymotion & Burpsuite setup for Android Mobile App Analysis

Grpc Pentest Suite ⭐ 96

gRPC-Web Pentesting Suite + Burp Suite Extension

Burp Copy As Ffuf ⭐ 95

Burp Extension that copies a request and builds a FFUF skeleton

Pentest Mapper ⭐ 94

A Burp Suite Extension for Application Penetration Testing to map flows, write test cases and track vulnerabilities

Burp HTTP history browser (BHHB) - A tool to view HTTP history exported from Burp Suite Community Edition

Burp Piper Custom Scripts ⭐ 92

Custom scripts for the PIPER Burp extensions.

Decoder Plus Plus ⭐ 91

An extensible application for penetration testers and software developers to decode/encode data into various formats.

1-100 of 274 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.