Open-source alternatives to POST2JSON

w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing

React Native Debugger is a standalone developer application for inspecting and debugging JavaScript runtimes in mobile applications built with React Native. It provides a dedicated interface to monitor the runtime state, network requests, and console logs of a remote mobile environment. The tool integrates specialized inspectors for Redux state management and GraphQL client debugging, allowing for time-traveling state transitions and the analysis of queries, mutations, and local cache. It also features a component hierarchy viewer for visualizing and modifying UI properties in real time. Bro

API快速索引 ：

一款快速修改HTTP数据包头的Burp Suite插件

A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers

A Burp Suite Extension that adds Header Checks and other helper features

Burp Extender python plugin that decrypts and encrypts AES encrypted post parameters on the fly. - This is just a mini project I used for a specific mobile app, so please don't try to judge the code quality. :D - For details :…

Burp plugin that collects all HTTP 500 messages

This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

Rapid is a Burp extension that enables you to save HTTP Request & Response data to a single file a lot easier and faster in one go.

一款存储HTTP请求入库的burpsuite插件

Burp Suite Extension useful to inspect UPnP security

Automated HTTP Request Repeating With Burp Suite

A Burp Extender plugin, that will make binary soap objects readable and modifiable.

Central Repo for Burp extensions

Burp Extractor is intended to be used as a one-size-fits-all tool for extracting data from HTTP responses to be reused in HTTP requests. This can be items such as CSRF tokens, Auth Bearer tokens, timestamps, etc. The extension uses regex to extract needed data from responses, and will insert…

JavaScript Web Service Proxy Burp Plugin

WSDL Parser extension for Burp

This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync vulnerabilities,…

Automatically exported from code.google.com/p/burp-extensions

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

Burp Suite extension for parsing Swagger web service definition files

Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).