Projects sharing features with Burp Piper

A Burp Suite plugin to easily manage cookies

This Burp extension will auto-extract and display values from HTTP Response bodies based on a Regular Expression, similarly to the "Grep - Extract" feature in Burp Intruder but will work on any Responses. This can be helpful when trying to perform manual reconnaissance or building an injection…

A BurpSuite extension to aid pentesting web applications that use Blazor Server/BlazorPack. Primary functionality includes converting BlazorPack messages to JSON and vice versa, introduces tamperability for BlazorPack serialized messages.

Burp Suite extension that automatically highlights different HTTP requests

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes (Burp Suite Pro and OWASP ZAP). Organize testing methodologies (Burp Suite Pro and Free).

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

Burp extension for quickly copying request/response data.

Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack

Burp Plugin - Conditional Match and Replace (CMAR)

Useful "Match and Replace" burpsuite rules

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

HAR importer

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

This extension generates scripts to reissue a selected request. The scripts can be run outside of Burp. It can be useful to script attacks such as second order SQL injection, padding oracle, fuzzing encoded value, etc.

A BApp to show the differences between two responses