Open-source alternatives to Burpheaders

spy-debugger is an HTTP proxy debugging tool designed for intercepting and analyzing network traffic from mobile devices, WebViews, and mobile browsers. It functions as a network packet capture tool and a remote browser inspector, allowing users to monitor HTTP and HTTPS requests wirelessly without the need for USB cables. The project distinguishes itself by using script injection to enable remote debugging. It injects JavaScript into HTTP response bodies, providing the ability to inspect HTML and CSS elements and perform live page content editing directly on the mobile screen. Additionally,

React Native Debugger is a standalone developer application for inspecting and debugging JavaScript runtimes in mobile applications built with React Native. It provides a dedicated interface to monitor the runtime state, network requests, and console logs of a remote mobile environment. The tool integrates specialized inspectors for Redux state management and GraphQL client debugging, allowing for time-traveling state transitions and the analysis of queries, mutations, and local cache. It also features a component hierarchy viewer for visualizing and modifying UI properties in real time. Bro

Burp Suite Extension to convert a POST request to JSON message, moving any .NET request verification token to HTTP headers if present

A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers

A Burp Suite Extension that adds Header Checks and other helper features

Burp Extender python plugin that decrypts and encrypts AES encrypted post parameters on the fly. - This is just a mini project I used for a specific mobile app, so please don't try to judge the code quality. :D - For details :…

Burp plugin that collects all HTTP 500 messages

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

Rapid is a Burp extension that enables you to save HTTP Request & Response data to a single file a lot easier and faster in one go.

一款存储HTTP请求入库的burpsuite插件

Automated HTTP Request Repeating With Burp Suite

Burp Extractor is intended to be used as a one-size-fits-all tool for extracting data from HTTP responses to be reused in HTTP requests. This can be items such as CSRF tokens, Auth Bearer tokens, timestamps, etc. The extension uses regex to extract needed data from responses, and will insert…

This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync vulnerabilities,…

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

Burp suite HTTP history advanced search and statistics.

This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.

API快速索引 ：

一款快速修改HTTP数据包头的Burp Suite插件