Open-source alternatives to InterestingFileScanner

Burp extension to passively scan for applications revealing software version numbers

Burp Extender to add unique form tokens to scanner requests.

BurpSuite extension to assist with Automated Forced Browsing/Endpoint Enumeration

ActiveEvent is a Burp plugin that will continuously monitor Burp scanner looking for new security issues. As soon as the scanner reports new vulnerabilities, the plugin will generate an Splunk Event directly into its management interface using the Http Event Collector.

Small Burp Suite Extension to generate multiple scan reports by host with just a few clicks. Works with Burp Suite Professional only (can be successfully loaded into Burp Suite Free but will not perform any function).

Burp-hash is a Burp Suite plugin.

` Q1: 将浏览器代理到被动扫描器上，访问网站变慢，甚至有时被封ip，这该怎么办？ Q2: 需要人工渗透的同时后台进行被动扫描，到底是代理到burp还是被动扫描器？ Q3: ...... `

Yara rules to be used with the Burp Yara-Scanner extension

Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.

Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.

Headers Burp Extension

This Burp Extension is intended to post to a service the details of an issue found either by active or passive scanning. The post request is written as a template and substitutes the contents of the issue into a post body which is pre-formatted per the requirements of the reporting application's…

This was the result of being nerd snipped by @tomsteele into scanning bower with the burp suite static analyzer.

headless-scanner-driver

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

Add & Track Custom Issues is a Burp Suite extension that allows users to add and track manual findings that the automated scanner was unable to identify.

Build OpenApi specs for your APIs from Burp's traffic using Levo.ai. Also detect the PII in your APIs.

This Burp extension reads metadata from various filetypes (JPEG, PNG, PDF, DOC, XLS and much more) using ExifTool. Results are presented as Passive scan issues and Message editor tabs.

The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.

This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.

Download releases:

HTTP file upload scanner for Burp Proxy

An active scan extension for Burp that provides supplemental coverage when testing popular content management systems.

CustomPassiveScanner By Chris Bush of Foundstone

Burp Issues for All!