48 Repos
Awesome GitHub RepositoriesProxy Tool Extensions
Add-ons for Burp Suite, Caido, and ZAP to enhance testing.
Explore 48 awesome GitHub repositories matching part of an awesome list · Proxy Tool Extensions. Refine with filters or upvote what's useful.
Awesome Proxy Tool Extensions GitHub Repositories
Finde die besten Repos mit KI.Wir suchen mit KI nach den am besten passenden Repositories.
- bugcrowd/hunt
bugcrowd/HUNT
2,321Auf GitHub ansehenHUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes (Burp Suite Pro and OWASP ZAP). Organize testing methodologies (Burp Suite Pro and Free).
Identify parameters vulnerable to common security issues.
Python - bit4woo/knife
bit4woo/knife
1,937Auf GitHub ansehenA burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
Add useful context menu functions to Burp Suite.
Javaburpburp-extensionsburp-plugin - wagiro/burpbounty
wagiro/BurpBounty
1,806Auf GitHub ansehenBurp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
Manage and organize custom security scanning rules.
Java - doyensec/inql
doyensec/inql
1,782Auf GitHub ansehenInQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Security testing tool for GraphQL endpoints.
Kotlin - portswigger/turbo-intruder
PortSwigger/turbo-intruder
1,769Auf GitHub ansehenTurbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
High-speed brute-forcing and fuzzing tool.
Kotlin - xnl-h4ck3r/gap-burp-extension
xnl-h4ck3r/GAP-Burp-Extension
1,520Auf GitHub ansehenBurp Extension to find potential endpoints, parameters, and generate a custom target wordlist
Discover and analyze potential parameters in HTTP requests.
Python - portswigger/param-miner
PortSwigger/param-miner
1,437Auf GitHub ansehenThis extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.
Automate discovery of hidden, unlinked parameters.
Java - portswigger/http-request-smuggler
portswigger/http-request-smuggler
1,213Auf GitHub ansehenThis Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync vulnerabilities,…
Detect and exploit HTTP request smuggling vulnerabilities.
Java - quitten/autorize
Quitten/Autorize
1,161Auf GitHub ansehenAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
Automate authorization testing for web applications.
Python - initroot/burpjslinkfinder
InitRoot/BurpJSLinkFinder
Burp Extension for a passive scanning JS files for endpoint links.
Extract links from JavaScript files.
Python - nccgroup/burpsuitehttpsmuggler
nccgroup/BurpSuiteHTTPSmuggler
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
Identify HTTP request smuggling vulnerabilities.
Java - nccgroup/blackboxprotobuf
nccgroup/blackboxprotobuf
Blackbox Protobuf now has an official package on PyPi under the name bbpb. The blackboxprotobuf package is an older fork
Decode and modify arbitrary Protobuf messages.
Python - nccgroup/burpsuiteloggerplusplus
nccgroup/BurpSuiteLoggerPlusPlus
Advanced Burp Suite Logging Extension
Advanced logging for Burp Suite requests and responses.
Java - securityinnovation/authmatrix
SecurityInnovation/AuthMatrix
AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
Automate authorization and access control testing.
Python - coreyd97/burpcustomizer
CoreyD97/BurpCustomizer
Because just a dark theme wasn't enough!
Customize the visual appearance of Burp Suite.
Java - portswigger/collaborator-everywhere
PortSwigger/collaborator-everywhere
A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator
Identify OAST-based vulnerabilities.
Java - h3xstream/http-script-generator
h3xstream/http-script-generator
This extension generates scripts to reissue a selected request. The scripts can be run outside of Burp. It can be useful to script attacks such as second order SQL injection, padding oracle, fuzzing encoded value, etc.
Generate scripts for HTTP request manipulation.
Java - wish-i-was/femida
wish-i-was/femida
Automated blind-xss search for Burp Suite
Security testing utility for Burp Suite.
Python - prodigysml/dr.-watson
prodigysml/Dr.-Watson
Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!
Find assets, subdomains, and sensitive keys during reconnaissance.
Python - h3xstream/burp-retire-js
h3xstream/burp-retire-js
Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
Detect vulnerable JavaScript libraries.
JavaScript
