
A Burp Suite extension that brings full DOM rendering capabilities directly into Burp, enabling effective security testing of modern JavaScript-heavy applications built with frameworks like ReactJS, VueJS, Angular, and more.
██████╗ ███████╗██████╗ ██████╗ ███╗ ███╗
██╔══██╗██╔════╝██╔══██╗██╔═══██╗████╗ ████║
██████╔╝█████╗ ██║ ██║██║ ██║██╔████╔██║
██╔══██╗██╔══╝ ██║ ██║██║ ██║██║╚██╔╝██║
██║ ██║███████╗██████╔╝╚██████╔╝██║ ╚═╝ ██║
╚═╝ ╚═╝╚══════╝╚═════╝ ╚═════╝ ╚═╝ ╚═╝
A Burp Suite extension that brings full DOM rendering capabilities directly into Burp, enabling effective security testing of modern JavaScript-heavy applications built with frameworks like ReactJS, VueJS, Angular, and more.

Build the extension:
mvn clean package
Load target/reDOM.jar in Burp Suite (Extensions → Add)
Load the extension — the settings panel opens automatically
Configure browser path, upstream proxy, and profile directory as needed
Click Launch & Connect to start the browser and connect
Send a request to Repeater and switch to the DOM Render tab
MIT License
| Setting | Description | Default |
|---|
| Browser path | Path to the Chromium executable | chromium |
| Upstream proxy | Burp proxy address | localhost:8080 |
| Profile directory | Browser profile to use | /tmp/redom |
| Accept invalid certificates | Trust self-signed and invalid TLS certs | on |
| Launch browser on startup | Automatically launch browser when extension loads | off |
| Host / Port | Remote debugging address | localhost:9222 |
| Command timeout | CDP command timeout | 30s |
| Post-load delay | Wait time after page load for JS to settle | 1000ms |
| Load timeout | Maximum time to wait for page load | 30s |
| Render on tab selection | Render automatically when the DOM Render tab is opened | on |
| Pretty-print HTML | Format the rendered HTML output | on |