Projects sharing features with BurpJSLinkFinder

W13scan is an automated vulnerability assessment tool designed to identify security flaws in web applications through a modular plugin architecture. It functions as a scanning engine that executes specialized security logic against web endpoints to detect injection flaws, information leaks, and configuration errors. The platform distinguishes itself by combining active probing with passive traffic analysis and out-of-band detection. It utilizes a callback-based service to verify blind vulnerabilities that do not provide immediate feedback, and it operates as a proxy to intercept and inspect l

Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

ActiveScan++ Burp Suite Plugin

BurpSuite extension to assist with Automated Forced Browsing/Endpoint Enumeration

Burp Extender to add unique form tokens to scanner requests.

Burp extension to passively scan for applications revealing software version numbers

Broken Link Hijacking Burp Extension

Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only (can be successfully loaded into Burp Suite Free but will not perform any function).

HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes (Burp Suite Pro and OWASP ZAP). Organize testing methodologies (Burp Suite Pro and Free).

Burp-hash is a Burp Suite plugin.

jsleak is a tool to find secret , paths or links in the source code during the recon.

Adds a customizable "Send to..."-context-menu to your BurpSuite.

` Q1: 将浏览器代理到被动扫描器上，访问网站变慢，甚至有时被封ip，这该怎么办？ Q2: 需要人工渗透的同时后台进行被动扫描，到底是代理到burp还是被动扫描器？ Q3: ...... `

Yara rules to be used with the Burp Yara-Scanner extension

Because just a dark theme wasn't enough!

A natural evolution of Burp Suite's Repeater tool

Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.

ActiveEvent is a Burp plugin that will continuously monitor Burp scanner looking for new security issues. As soon as the scanner reports new vulnerabilities, the plugin will generate an Splunk Event directly into its management interface using the Http Event Collector.