Tools

justmorpheus/burp-automation

Performing automated scan using Burp Suite Pro & Vmware Burp Rest API

go-appsec/toolbox

Collaborative application security testing between humans and agents via CLI and MCP

sobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

tpt11fb/springvulscan

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

jas502n/burpsuite_pro_v1.7.37

Comprehensive web application security testing platform featuring advanced scanning engine, intercepting proxy, and automated vulnerability detection…

jp/hermes-proxy

Hermes Proxy - HTTP Traffic Analyzer

caido-community/paramfinder

Discover hidden parameters in Caido

hackinglz/maps_scanner

MAPS cloud scanner and response parser for Microsoft Defender research.

joanbono/gurp

Burp Commander written in Go

morpheuslord/nmap-api

RESTful API wrapping Nmap for automated network scanning, port detection, service enumeration, and vulnerability analysis with optional AI-powered…

shaniidev/bug-reaper

Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesWeHack.

letsencrypt/test-certs-site

A simple server to host the valid, revoked, and expired certificates required by Section 2.2 of the CA/Browser Forum Baseline Requirements.

mirfansulaiman/customheader

This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy…

nccgroup/wcfdser-ngng

A Burp Extender plugin, that will make binary soap objects readable and modifiable.

emo-crab/slinger

An HTTP client specifically developed for security researchers

logisek/huntcyberark

CyberArk Security Audit

raz0r/burp-radamsa

Radamsa fuzzer extension for Burp Suite

projectdiscovery/collaborator

BurpSuite Standard/Private Collaborator Library