Open-source alternatives to Burpextractor

spy-debugger is an HTTP proxy debugging tool designed for intercepting and analyzing network traffic from mobile devices, WebViews, and mobile browsers. It functions as a network packet capture tool and a remote browser inspector, allowing users to monitor HTTP and HTTPS requests wirelessly without the need for USB cables. The project distinguishes itself by using script injection to enable remote debugging. It injects JavaScript into HTTP response bodies, providing the ability to inspect HTML and CSS elements and perform live page content editing directly on the mobile screen. Additionally,

React Native Debugger is a standalone developer application for inspecting and debugging JavaScript runtimes in mobile applications built with React Native. It provides a dedicated interface to monitor the runtime state, network requests, and console logs of a remote mobile environment. The tool integrates specialized inspectors for Redux state management and GraphQL client debugging, allowing for time-traveling state transitions and the analysis of queries, mutations, and local cache. It also features a component hierarchy viewer for visualizing and modifying UI properties in real time. Bro

Burp Suite Extension to convert a POST request to JSON message, moving any .NET request verification token to HTTP headers if present

1. Download the latest release file; e.g., CustomParameterHandler3.0.py 2. Under Extender > Options > Python Environment, point Burp to the location of your copy of Jython's standalone .jar file. a. If you don't already have Jython's standalone .jar file, download it here. 3. Finally, add…

A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers

A Burp Suite Extension that adds Header Checks and other helper features

Burp Extender python plugin that decrypts and encrypts AES encrypted post parameters on the fly. - This is just a mini project I used for a specific mobile app, so please don't try to judge the code quality. :D - For details :…

Burp plugin that collects all HTTP 500 messages

CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

Rapid is a Burp extension that enables you to save HTTP Request & Response data to a single file a lot easier and faster in one go.

一款存储HTTP请求入库的burpsuite插件

Burp Extension for a passive scanning JS files for endpoint links.

Automated HTTP Request Repeating With Burp Suite

Advanced Burp Suite Logging Extension

This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync vulnerabilities,…

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.

A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。

Burp suite HTTP history advanced search and statistics.

A simple Burp Suite extension to check for the headers identified in OWASP's Secure Headers Project

API快速索引 ：