Topic: burp-plugin Goto Github

👇 Here are 131 public repositories matching this topic...

acmesec / sylas
burp-plugin,新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool
Organization: acmesec
burp-extensions burp-plugin burpsuite-extender burpsuite-tools scan scanner scanner-web subdomain-finder subdomain-scanner

anof-cyber / pentest-mapper
burp-plugin,A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities
User: anof-cyber
Home Page: https://anof-cyber.github.io/Pentest-Mapper/
appsec bugbounty burp burp-extensions burp-plugin burpsuite burpsuite-extender burpsuite-tools infosec pentesting

anof-cyber / pycript
burp-plugin,Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty
User: anof-cyber
Home Page: https://pycript.souravkalal.tech/
application-security bug-bounty bugbounty burp-extensions burp-plugin burpsuite burpsuite-extender cybersecurity encryption infosec penetration-testing pentesting python security

aress31 / burpgpt
burp-plugin,A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.
User: aress31
ai burp-extensions burpsuite cybersecurity gpt openai pentesting security security-automation webapp

aress31 / flarequench
burp-plugin,Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.
User: aress31
burpsuite burp-plugin burp-extensions cloudflare cloudflare-bypass crimeflare

aress31 / openapi-parser
burp-plugin,Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
User: aress31
burpsuite restful-api parser burp-plugin pentesting openapi-specification swagger yaml json openapi

augustd / burp-suite-error-message-checks
burp-plugin,Burp Suite extension to passively scan for applications revealing server error messages
User: augustd
scanning burp penetration-testing burpsuite burp-plugin burp-extensions pentest java

bit4woo / domain_hunter
burp-plugin,A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件
User: bit4woo
Home Page: https://www.bilibili.com/video/BV1Jt4y1U7YG/
domain-hunter subdomain burp-extensions burp-plugin spider sitemap similar-domain related-domain certification subject-alternative-name

bit4woo / knife
burp-plugin,A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
User: bit4woo
Home Page: https://www.bilibili.com/video/bv1BC4y1s7nS
burp-extensions burpsuite-extender update-cookie cookie knife burp-plugin menu unicode-to-chinese u2c hackbar

bit4woo / recaptcha
burp-plugin,reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
User: bit4woo
burp-extensions burp-plugin captcha intruder burpsuite recaptcha recognize-captcha recognizes-images

bit4woo / u2c
burp-plugin,Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
User: bit4woo
Home Page: https://github.com/bit4woo/knife
burp-extensions burp-plugin burpsuite-extender unicode chinese

bitthebyte / bitblinder
burp-plugin,BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities
User: bitthebyte
burp-extensions burpsuite burpsuite-extender burp-plugin python jython

c0ny1 / captcha-killer
burp-plugin,burp验证码识别接口调用插件
User: c0ny1
burp-extensions burpsuite-extender burp-plugin captcha

chopicalqui / turbodataminer
burp-plugin,The objective of this Burp Suite extension is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite project as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests using Python scripts. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected by Burp Suite.
User: chopicalqui
burp burp-api burp-extensions burp-plugin burpsuite burpsuite-extender data-mining intelligence intelligence-gathering

codingo / minesweeper
burp-plugin,A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
User: codingo
burpsuite burpsuitepro burp-extensions burp-plugin web-security hacking hacking-tool web-application-hacking cryptocurrency bitcoin

d3vilbug / hackbar
burp-plugin,HackBar plugin for Burpsuite
User: d3vilbug
hackbar burp-plugin burp-extensions burpsuite-extender burp burpsuite burp-ui

doyensec / burpdeveltraining
burp-plugin,Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
Organization: doyensec
training-materials burpsuite burp-plugin security-automation java

dreamncn / customcrypto
burp-plugin,Burp自定义加解密插件
User: dreamncn
burp burp-extensions burp-plugin burpsuite

ebryx / aes-killer
burp-plugin,Burp Plugin to decrypt AES encrypted traffic on the fly
Organization: ebryx
burpsuite aes-encryption decryptor aes-decryption burp-plugin burp-extensions burp burpsuite-extender burpsuite-tools burp-ui

f0ng / autodecoder
burp-plugin,Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。
User: f0ng
burp-plugin burpsuite-extender burp

f0ng / captcha-killer-modified
burp-plugin,captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite
User: f0ng
Home Page: https://f0ng.github.io/2022/03/24/burp%E9%AA%8C%E8%AF%81%E7%A0%81%E7%88%86%E7%A0%B4%E6%8F%92%E4%BB%B6%E4%BA%8C%E6%94%B9/
burp-extensions burp burp-plugin

f0ng / log4j2burpscanner
burp-plugin,CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks
User: f0ng
Home Page: https://f0ng.github.io/2021/12/22/log4j2burpscanner/
burp-extensions burp-plugin log4j2 log4jshell

gnothiseautonlw / burp-shell-fwd-lfi
burp-plugin,A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration
User: gnothiseautonlw
security security-tools burpsuite burp-extensions burp-plugin burpsuite-extender pentesting penetration-testing penetration-testing-tools

gosecure / csp-auditor
burp-plugin,Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
Organization: gosecure
burp burp-plugin csp hacktoberfest http security zap zap-plugin

h3xstream / burp-retire-js
burp-plugin,Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
User: h3xstream
burp-plugin zap-plugin javascript vulnerability scanner maven

hvqzao / burp-wildcard
burp-plugin,Burp extension intended to compact Burp extension tabs by hijacking them to own tab.
User: hvqzao
burp burp-extensions burp-plugin burpsuite

ivision-research / burpscript
burp-plugin,
Organization: ivision-research
burp-extensions burp-plugin burpsuite scripting

keramas / mssqli-duet
burp-plugin,SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing
User: keramas
sql-injection mssql penetration-testing application-security active-directory user-enumeration windows burp-extensions burp-plugin

moloch-- / csp-bypass
burp-plugin,A Burp Plugin for Detecting Weaknesses in Content Security Policies
User: moloch--
burp-plugin csp content-security-policy security

nccgroup / autorepeater
burp-plugin,Automated HTTP Request Repeating With Burp Suite
Organization: nccgroup
Home Page: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2018/january/autorepeater-automated-http-request-repeating-with-burp-suite/
burp-plugin security burpsuite

netsoss / headless-burp
burp-plugin,Automate security tests using Burp Suite.
Organization: netsoss
Home Page: https://netsoss.github.io/headless-burp/
burp burp-extensions burpsuite burp-plugin maven-plugin headless continuous-security automation

pentagridsec / pentagridscancontroller
burp-plugin,Improve automated and semi-automated active scanning in Burp Pro
Organization: pentagridsec
Home Page: https://www.pentagrid.ch/en/blog/improving-web-application-security-testing-with-pentagrid-scan-controller/
burp-extensions burp-plugin owasp web-scanner pentesting-tool web-penetration-testing

quitten / autorize
burp-plugin,Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
User: quitten
authorization authorization-enforcement burpsuite burp-plugin jython application-security

silentsignal / burp-log4shell
burp-plugin,Log4Shell scanner for Burp Suite
Organization: silentsignal
Home Page: https://blog.silentsignal.eu/2021/12/12/our-new-tool-for-enumerating-hidden-log4shell-affected-hosts/
burpsuite burp-extensions burp-plugin burpsuite-extender log4j2

silentsignal / burp-piper
burp-plugin,Piper Burp Suite Extender plugin
Organization: silentsignal
Home Page: https://blog.silentsignal.eu/2020/03/27/unix-style-approach-to-web-application-testing/
burp-extensions burpsuite-extender burp-plugin

simioni87 / auth_analyzer
burp-plugin,Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.
User: simioni87
application-security auth authorization burp-extensions burp-plugin burpsuite pentest-tool portswigger

summitt / nope-proxy
burp-plugin,TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
User: summitt
appsec appsecurity burp-extensions burp-plugin burpsuite burpsuite-extender hacking mitmproxy pentesting protobuf

synacktiv / hopla
burp-plugin, HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
Organization: synacktiv
burp-plugin burp-extensions burp-ui burp-suite burp

thekingofduck / copy2java
burp-plugin,一键生成Java代码的burp插件/Generate Java script for fuzzing in Burp。
User: thekingofduck
burp-plugin fuzzing java-script-generater

thelsa / burp-info-extractor
burp-plugin,burpsuite extension for extract information from data
User: thelsa
extractor burpsuite burp-plugin information

thelsa / burp-sensitive-param-extractor
burp-plugin,burpsuite extension for check and extract sensitive request parameter
User: thelsa
burp-plugin burpsuite checker extractor parameters sensitive

thelsa / burp-unauth-checker
burp-plugin,burpsuite extension for check unauthorized vulnerability
User: thelsa
burpsuite burp-plugin unauthenticated vulnerability checker

thomashartm / burp-aem-scanner
burp-plugin,Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common misconfigurations and security holes.
User: thomashartm
burp-extensions burp security-audit security-automation java aem adobe-experience-manager dispatcher burp-plugin

thomaspatzke / wase
burp-plugin,The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
User: thomaspatzke
burp-plugin burp webappsec pentesting elasticsearch

tkmru / lazycsrf
burp-plugin,A more useful CSRF PoC generator on Burp Suite
User: tkmru
burpsuite burp-extensions burp-plugin csrf blackhat arsenal

usdag / cstc
burp-plugin,CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef
Organization: usdag
Home Page: https://herolab.usd.de/news-cyber-security-transformation-chef/
cyberchef extender burpsuite burp-extensions burp-plugin java encoding transformation

vaycore / onescan
burp-plugin,OneScan是递归目录扫描的BurpSuite插件
User: vaycore
burp burp-extensions burp-plugin dirscan fuzz fuzz-testing

whwlsfb / burpcrypto
burp-plugin,BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件
User: whwlsfb
Home Page: https://blog.wanghw.cn/burpcrypto
burp-extensions burp-plugin burpsuite-extender burpsuite payloads burpcrypto fuzz-testing execute-js-encryption ctf-tools ctf

xer0times / sqli-query-tampering
burp-plugin,SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.
User: xer0times
bug-bounty bugbounty bughunting burp-extensions burp-plugin burpsuite burpsuite-pro evasion payload-generator pentesting pentesting-tools sqli sqlinjection

yandex / burp-molly-pack
burp-plugin,Security checks pack for Burp Suite
Organization: yandex
security burp-extensions burp-plugin vulnerability-detection burpsuite burpsuite-pro