Burp GitHub Repositories

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

构建优化高效的渗透 fuzz 字典合集

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

HackBar plugin for Burpsuite

Burp Suite Certified Practitioner Exam Study

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

Burp Plugin to decrypt AES encrypted traffic on the fly

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

SAML2 Burp Extension

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Bugbounty scope tool

SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。

gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)

Automate security tests using Burp Suite.

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

Firefox and Google Chrome Extension of HackBar without license

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

Copy as requests plugin for Burp Suite

Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the integration of webhooks, this tool sends real-time updates whenever a new issue is identified, directly to your preferred endpoint. No more waiting for final reports – you get instant, actionable insights! 🛠️

面向移动安全分析场景的 6 阶段总控 Skill。用于统一调度 APK 静态侦察、流量与代码对齐、SO/JNI 深度分析、加密与漏洞综合分析、验证设计与报告交付流程。支持 JADX MCP、Burp/Yakit MCP、IDA/Ghidra MCP。

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website