Open-source alternatives to Bookmarks

A Burp Suite plugin to easily manage cookies

Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.

Burp Suite extension that automatically highlights different HTTP requests

Adds a customizable "Send to..."-context-menu to your BurpSuite.

Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack

Burp extension for quickly copying request/response data.

Because just a dark theme wasn't enough!

This Burp extension will auto-extract and display values from HTTP Response bodies based on a Regular Expression, similarly to the "Grep - Extract" feature in Burp Intruder but will work on any Responses. This can be helpful when trying to perform manual reconnaissance or building an injection…

PyCript Websocket is now merge into https://github.com/Anof-cyber/PyCript, this repo is not available anymore.

Burp Plugin - Conditional Match and Replace (CMAR)

Useful "Match and Replace" burpsuite rules

Burp Suite extension to track vulnerability assessment progress

Burp plugin that collects all HTTP 500 messages

HAR importer

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

A BApp to show the differences between two responses

Hackvertor is a tag based conversion tool written in Java implemented as a Burp Suite extension. Tags are constructed as follows: the @ symbol is used as an identifier that it's a Hackvertor tag followed by the name of the tag in this case base64.

A Burp extension to show the Collaborator client in a tab

Fuzz WebSockets with custom Python code

Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.

Rapid is a Burp extension that enables you to save HTTP Request & Response data to a single file a lot easier and faster in one go.

BurpSuite extension for Repeater tool that renders responses in a real browser.