Open-source alternatives to BurpSuiteLoggerPlusPlus

Adds a customizable "Send to..."-context-menu to your BurpSuite.

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

Because just a dark theme wasn't enough!

A natural evolution of Burp Suite's Repeater tool

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes (Burp Suite Pro and OWASP ZAP). Organize testing methodologies (Burp Suite Pro and Free).

Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.

1. Download the latest release file; e.g., CustomParameterHandler3.0.py 2. Under Extender > Options > Python Environment, point Burp to the location of your copy of Jython's standalone .jar file. a. If you don't already have Jython's standalone .jar file, download it here. 3. Finally, add…

Burp plugin that collects all HTTP 500 messages

CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

Burp Suite extension to track vulnerability assessment progress

This extension generates scripts to reissue a selected request. The scripts can be run outside of Burp. It can be useful to script attacks such as second order SQL injection, padding oracle, fuzzing encoded value, etc.

A Burp extension to show the Collaborator client in a tab

Rapid is a Burp extension that enables you to save HTTP Request & Response data to a single file a lot easier and faster in one go.

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅