Open-source alternatives to Taborator

This Burp extension will auto-extract and display values from HTTP Response bodies based on a Regular Expression, similarly to the "Grep - Extract" feature in Burp Intruder but will work on any Responses. This can be helpful when trying to perform manual reconnaissance or building an injection…

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

PyCript Websocket is now merge into https://github.com/Anof-cyber/PyCript, this repo is not available anymore.

Burp Suite extension that automatically highlights different HTTP requests

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

HUNT Suite is a collection of Burp Suite Pro/Free and OWASP ZAP extensions. Identifies common parameters vulnerable to certain vulnerability classes (Burp Suite Pro and OWASP ZAP). Organize testing methodologies (Burp Suite Pro and Free).

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

Burp extension for quickly copying request/response data.

Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack

Burp Plugin - Conditional Match and Replace (CMAR)

Useful "Match and Replace" burpsuite rules

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Handy Collaborator is a Burp Suite Extension that lets you use the Collaborator tool during manual testing in a comfortable way. It is possible to generate a Collaborator payload from the contextual menu of editable tabs (Repeater, Intercept, etc.) and a separate thread will check periodically…

HAR importer

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.

HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

A Burp Suite plugin to easily manage cookies