reburp
forefy/reburpA Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
ai-securityapi-security-testingfuzzing+7
forefy/reburpA Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
hackwarts12/burp-recordadoraPersists BurpSuite proxy history, Repeater requests, and Intruder payloads across sessions; exports and imports .log files for web pentesting context.
t3l3machus/pentest-pivotingA compact guide to network pivoting for penetration testings / CTF challenges.
codextf2/burp2malleableQuick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
static-flow/burpsuite-team-extensionThis Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your…
sleeyax/burp-awesome-tlsBurp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
d3mondev/burp-vps-proxyThis Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.
bugcrowd/huntFlags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…
irsdl/burpsuitesharpenerexThis extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.
caido-community/burp2caidoA tool to migrate Burpsuite HTTP history to Caido
codesiddhant/jasmin-ransomwareJasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to…
jas502n/burpsuite-pluginPlugin For BurpSuite (Pentester)
nccgroup/autorepeaterAutomated HTTP Request Repeating With Burp Suite
nccgroup/burpsuitehttpsmugglerA Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
jas502n/jboss_jmxinvokerservlet_deserialization_rceJboss_JMXInvokerServlet_Deserialization_RCE
cappricio-securities/burpflowBurpFlow is one of the best Burp Suite automation tools for bug bounty hunters and penetration testers, widely used to load recon data via proxy and…
synacktiv/hoplaHopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite