Open-source alternatives to Bradamsa

dirsearch is a command-line security tool and web path scanner used for discovering hidden directories and files on web servers. It functions as a recursive directory fuzzer and brute-force utility that identifies undocumented paths and sensitive files using wordlists and HTTP status codes. The tool distinguishes itself through template-driven path generation and an automated HTTP response filter that uses status codes, content length, and regex patterns to isolate valid targets. It supports recursive directory crawling to map complex web structures and provides state-persistence serializatio

ZIP File Raider - Burp Extension for ZIP File Payload Testing

Generate payload processors on the fly - without having to create individual extensions.

Quickly test various encoding for a given value in Burp Intruder

Burp Suite AMF Extension

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

Burp Extension to manipulate AES encrypted payloads

BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JSON; XML; GWT; binary) and following encoding-scheme applied originally.

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

Burp Hashcat Maskprocessor Extension, inspired by hashcat maskprocessor https://github.com/hashcat/maskprocessor

Enables transparent use of Excel files in Burp Suite

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

for burp

Article : https://thehacktronian.blogspot.com/2018/09/burpsuitepro.html

Burp Intruder File Payload Generator This extension provides a way to use file contents as custom Intruder payloads.

A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers "Copy as JavaScript" to convert HTTP requests for enhanced XSS testing.

A Burpsuite extension written in Python to perform basic validation fuzzing

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

Burp Payloads

An extension for BurpSuite used to access and modify compressed HTTP payloads without changing the content-encoding.

A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results

A natural evolution of Burp Suite's Repeater tool

HackBar plugin for Burpsuite