Open-source alternatives to Wsdler

This extension copies the selected request(s) to the clipboard as PowerShell object assignments. Standard or Base64 formats are available, with Base64 being the best option for binary data such as file uploads. Copied data also includes the necessary command to invoke the web request(s).

This tool detects XML Fast Infoset encoded HTTP requests in Burp based on the Content-Type header (xml/fastinfoset). Once the encoding is detected, it un-gzips the requests and decodes it to present a text-based readable user-friendly version. After a request has been edited, the plugin converts…

Belle (Burp Suite 非公式日本語化ツール)

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

This Burp Suite extension turns Burp into a Google Authenticator client. The current Google Two-Factor Authentication (2FA) code is automatically computed from a given shared secret and applied to bespoke location(s) in relevant requests in real-time.

HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes (Burp Suite Pro and OWASP ZAP). Organize testing methodologies (Burp Suite Pro and Free).

Doxycannon uses docker to create multiple socks proxies where the upstream internet connections are either VPN connections or Tor nodes

This is a Burp Suite Pro extension that is able to find the “Reverse Tabnabbing” attack. For more information about “Reverse Tabnabbing” attack please see https://www.owasp.org/index.php/Reverse_Tabnabbing

Utilities for creating Burp Suite Extensions, including the Burp Extensions API interfaces.

JSONPath extension for BurpSuite

BurpSuite extension to assist with Automated Forced Browsing/Endpoint Enumeration

A simple burp plugin that highlights the Proxy history to differentiate requests made by different browsers. The way this works is that each browser would be assigned one color and the highlights happen automatically.

BurpelFish - Adds Google Translate to Burp's Context Menu. "Babel Fish" language translation for app-sec testing in other languages.

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

Burp Suite plugin identifies insertion points for GWT (Google Web Toolkit) requests

A burp extender that recalculate signature value automatically after you modified request parameter value.

Simple Burp extension to drop blacklisted hosts

A repository for GraphQL Extension for Burp Suite

A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. VIEWSTATE).

Burp-hash is a Burp Suite plugin.

Adds a customizable "Send to..."-context-menu to your BurpSuite.