Open-source alternatives to Burp Yara Rules

Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malicious artifacts.

Broken Link Hijacking Burp Extension

Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.

Burp Suite extension to passively scan for applications revealing server error messages

Burp extension to passively scan for applications revealing software version numbers

Burp Extender to add unique form tokens to scanner requests.

Collection of private Yara rules.

ActiveEvent is a Burp plugin that will continuously monitor Burp scanner looking for new security issues. As soon as the scanner reports new vulnerabilities, the plugin will generate an Splunk Event directly into its management interface using the Http Event Collector.

Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only (can be successfully loaded into Burp Suite Free but will not perform any function).

ActiveScan++ Burp Suite Plugin

This repository contains GCTI's open source detection signatures.

Yara rules for malware families seen as part of targeted threats project

Public catalog of stealer log fingerprints. Banner strings, field signatures, sanitized samples, and YARA rules for 30+ malware families including RedLine, Vidar, Lumma, StealC, and Rhadamanthys. For incident response, detection engineering, and threat intelligence research.

Collection of YARA signatures from individual research

A home for detection content developed by the delivr.to team

rules to identify files containing juicy information like usernames, passwords etc

Please no pull requests for this repository. Thanks!

Detection in the form of Yara, Snort and ClamAV signatures.

This Burp Extension is intended to post to a service the details of an issue found either by active or passive scanning. The post request is written as a template and substitutes the contents of the issue into a post body which is pre-formatted per the requirements of the reporting application's…

Elastic Security detection content for Endpoint

File Scanning Framework

Indicators of Compromises (IOC) of our various investigations

This was the result of being nerd snipped by @tomsteele into scanning bower with the burp suite static analyzer.

headless-scanner-driver

Repository of YARA rules made by Trellix ATR Team