PwnFox
yeswehack/pwnfoxFirefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…
penetration-testingweb-proxies-interceptionweb-security
yeswehack/pwnfoxFirefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…
intrudir/bypassfuzzerFuzz 401/403/404 pages for bypasses
vulnbe/burpsuite-copy-as-xmlhttprequestBurpSuite extension that converts HTTP requests into JavaScript XMLHttpRequest code for streamlined XSS proof-of-concept generation and web…
infobyte/faraday_zapZap Extension for collaboration in Faraday
overspace-labs/haeModular Burp Suite extension for fine-grained highlighting and extraction of sensitive data from HTTP and WebSocket traffic, enabling efficient…
joasasantos/osce3-complete-guideOSWE, OSEP, OSED, OSEE
aress31/burpgptA Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables…
federicodotta/bridaThe new bridge between Burp Suite and Frida!
sleeyax/burp-awesome-tlsBurp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
wagiro/burpbountyBurp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and…
doyensec/inqlInQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and…
portswigger/turbo-intruderHigh-speed Burp Suite extension for sending large volumes of HTTP requests with a custom stack, Python-based attack configuration, and advanced…
repplus/rep-chromerep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks
xnl-h4ck3r/gap-burp-extensionBurp Extension to find potential endpoints, parameters, and generate a custom target wordlist
portswigger/param-minerBurp Suite extension that discovers hidden, unlinked parameters using advanced diffing and binary search, enabling detection of web cache poisoning…
six2dez/burp-ai-agentBurp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
portswigger/http-request-smugglerBurp Suite extension for automated detection and exploitation of HTTP request smuggling vulnerabilities, supporting HTTP/1.1 and HTTP/2-downgrade…
elkokc/reflectorBurp plugin able to find reflected XSS on page in real-time while browsing on site