Open-source alternatives to Headless Scanner Driver

Burp extension to passively scan for applications revealing software version numbers

Burp Extender to add unique form tokens to scanner requests.

ActiveEvent is a Burp plugin that will continuously monitor Burp scanner looking for new security issues. As soon as the scanner reports new vulnerabilities, the plugin will generate an Splunk Event directly into its management interface using the Http Event Collector.

Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only (can be successfully loaded into Burp Suite Free but will not perform any function).

` Q1: 将浏览器代理到被动扫描器上，访问网站变慢，甚至有时被封ip，这该怎么办？ Q2: 需要人工渗透的同时后台进行被动扫描，到底是代理到burp还是被动扫描器？ Q3: ...... `

Yara rules to be used with the Burp Yara-Scanner extension

This Burp Extension is intended to post to a service the details of an issue found either by active or passive scanning. The post request is written as a template and substitutes the contents of the issue into a post body which is pre-formatted per the requirements of the reporting application's…

This was the result of being nerd snipped by @tomsteele into scanning bower with the burp suite static analyzer.

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

Burp Extension for a passive scanning JS files for endpoint links.

Add & Track Custom Issues is a Burp Suite extension that allows users to add and track manual findings that the automated scanner was unable to identify.

This Burp extension reads metadata from various filetypes (JPEG, PNG, PDF, DOC, XLS and much more) using ExifTool. Results are presented as Passive scan issues and Message editor tabs.

The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.

The PDF Metadata Burp Extension provides an additional passive Scanner check for metadata in PDF files.

Download releases:

Burp extension

HTTP file upload scanner for Burp Proxy

An active scan extension for Burp that provides supplemental coverage when testing popular content management systems.

CustomPassiveScanner By Chris Bush of Foundstone

Burp Issues for All!

Yara intergrated into BurpSuite

ActiveScan++

Burp Extension for a passive scanning JS files for endpoint links.

Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

HTTP file upload scanner for Burp Proxy