Open-source alternatives to DecoderProBurpSuite

This Burp extension will auto-extract and display values from HTTP Response bodies based on a Regular Expression, similarly to the "Grep - Extract" feature in Burp Intruder but will work on any Responses. This can be helpful when trying to perform manual reconnaissance or building an injection…

A Burp Suite plugin to easily manage cookies

Burp Suite extension that automatically highlights different HTTP requests

Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】

Adds a customizable "Send to..."-context-menu to your BurpSuite.

Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack

Burp extension for quickly copying request/response data.

Because just a dark theme wasn't enough!

A natural evolution of Burp Suite's Repeater tool

Burp Plugin - Conditional Match and Replace (CMAR)

Useful "Match and Replace" burpsuite rules

HAR importer

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.

This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

Burp extension to decode NTLM SSP headers. NTLM challenges over HTTP allows us to decode interesting information about a server, such as: - The server's hostname - The server's operating system - The server's timestamp - The domain's name - The domain's FQDN - The parent domain's name

A BApp to show the differences between two responses

Hackvertor is a tag based conversion tool written in Java implemented as a Burp Suite extension. Tags are constructed as follows: the @ symbol is used as an identifier that it's a Hackvertor tag followed by the name of the tag in this case base64.

A Burp extension to show the Collaborator client in a tab

Fuzz WebSockets with custom Python code

Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.

Adds extensibility to Burp by using a list of payloads to pattern match on HTTP responses highlighting interesting and potentially vulnerable areas.

Add & Track Custom Issues is a Burp Suite extension that allows users to add and track manual findings that the automated scanner was unable to identify.

Add & Track Custom Issues is a Burp Suite extension that allows users to add and track manual findings that the automated scanner was unable to identify.

Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator