Open-source alternatives to Http Script Generator

Because just a dark theme wasn't enough!

A natural evolution of Burp Suite's Repeater tool

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

A simple random HTTP fuzzer. This plugin adds ActiveScan checks that fuzz the HTTP request. Using this fuzzer with any standard HTTP server (Apache, Nginx, etc.) is usually useless, but can be fun. It can be used to see the different error conditions a server and the web application code can run…

Quickly test various encoding for a given value in Burp Intruder

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

A Burp extension to show the Collaborator client in a tab

Advance of fuzzing for Web pentest. Based on Burp extension, send HTTP request template out to Python fuzzer.

Burp Extension for a passive scanning JS files for endpoint links.

burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz

BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JSON; XML; GWT; binary) and following encoding-scheme applied originally.

Burp Suite plugin which implement PyJFuzz for fuzzing web application.

Released as open source by NCC Group Plc - http://www.nccgroup.trust/

Blackbox Protobuf now has an official package on PyPi under the name bbpb. The blackboxprotobuf package is an older fork

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

Advanced Burp Suite Logging Extension

Improved decoder for Burp Suite