Tools

compasssecurity/samlraider

SAML2 Burp Extension

xnl-h4ck3r/gap-burp-extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

simioni87/auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

spiderlabs/airachnid-burp-extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

rsrdesarrollo/generator-burp-extension

Everything you need about Burp Extension Generation

nccgroup/argumentinjectionhammer

A Burp Extension designed to identify argument injection vulnerabilities.

allyomalley/burpparamflagger

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

capt-meelo/telewreck

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.

0xdexter0us/log4j-scanner

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

destine21/zipfileraider

ZIP File Raider - Burp Extension for ZIP File Payload Testing

synacktiv/burp-jq

Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.

t0xodile/crlf-powered-desync-scanner

Burp extension scanner for CRLF injection and HTTP desync attacks, using mutated probes, WAF false-positive checks, and optional…

infobyte/faraday_burp

Burp Extension for collaboration in Faraday

teycir/burpwpsscan

Burp extension for wordpress security scanning

cerberusmrxi/wp-contest-gallery-28.1.4-exploit

Complete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF…

lindi2/samlraider

SAML2 Burp Extension

hemp3l/cve-2017-6640-poc

Proof of concept for CVE-2017-6640 as burp extension