Repositories list

• http-request-smuggler

  Public
  Java

  •

  Other

  •106•997•9•2•Updated May 30, 2025May 30, 2025

• turbo-intruder

  Public
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  Kotlin

  •

  Apache License 2.0

  •222•1.6k•16•1•Updated May 30, 2025May 30, 2025

• semgrepper

  Public
  An extension to use Semgrep inside Burp Suite.

  Java

  •

  GNU General Public License v3.0

  •8•5•0•0•Updated May 29, 2025May 29, 2025

• jwt-scanner

  Public
  JWT-attacker Burp Extension

  Java

  •

  MIT License

  •7•2•0•0•Updated May 29, 2025May 29, 2025

• twilio-otp-authenticator

  Public
  This extension utilizes session handling rules to provide a Twilio OTP code to outgoing requests, used in BurpSuite Pro

  extension

  Java

  •1•0•0•0•Updated May 29, 2025May 29, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •18•145•2•1•Updated May 28, 2025May 28, 2025

• xss-cheatsheet-data

  Public
  This repository contains all the XSS cheatsheet data to allow contributions from the community.

  Other

  •85•420•1•1•Updated May 27, 2025May 27, 2025

• ununicode

  Public
  "de-unicode" unicode escaped sequenses

  extension

  Java

  •4•1•0•0•Updated May 23, 2025May 23, 2025

• okta-totp-authenticator

  Public
  Burp Suite plugin that dynamically generates Okta TOTP 2FA code for use in session handling rules

  extension

  Java

  •1•0•0•0•Updated May 23, 2025May 23, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •78•32•0•0•Updated May 23, 2025May 23, 2025

• sqli-py

  Public
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

  Python

  •

  The Unlicense

  •94•91•0•0•Updated May 23, 2025May 23, 2025

• extensibility-helper

  Public
  Java

  •

  GNU General Public License v3.0

  •3•6•0•0•Updated May 23, 2025May 23, 2025

• inql

  Public
  InQL - A Burp Extension for GraphQL Security Testing

  Kotlin

  •

  Apache License 2.0

  •168•40•0•0•Updated May 22, 2025May 22, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  Java

  •

  Apache License 2.0

  •197•224•0•0•Updated May 22, 2025May 22, 2025

• sequence-comparer

  Public
  Burp Suite Extension

  extension

  Python

  •

  MIT License

  •1•0•0•0•Updated May 22, 2025May 22, 2025

• enterprise-helm-charts

  Public
  Helm charts for Burp Suite DAST Kubernetes installation.

  kubernetesenterpriseburp+ 2dasthelm-chart

  Smarty

  •

  Apache License 2.0

  •9•5•2•3•Updated May 22, 2025May 22, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•4•0•0•Updated May 22, 2025May 22, 2025

• passkey-raider

  Public
  Burp Suite extension for testing Passkey systems.

  extension

  Java

  •

  MIT License

  •3•0•0•0•Updated May 21, 2025May 21, 2025

• url-harvester

  Public
  This Burp Suite Extension, URL Harvester captures in-scope URLs from Burp's Proxy and Target tools, providing a GUI to view, manage, and export them.

  extension

  Java

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated May 21, 2025May 21, 2025

• ai-prompt-fuzzer

  Public
  Burp extension to fuzz/brute force GenAI/LLM prompts using a list of various payloads.

  Java

  •

  GNU General Public License v3.0

  •2•7•0•0•Updated May 20, 2025May 20, 2025

• highlighter-and-extractor

  Public
  HaE - BurpSuite Highlighter and Extractor

  Java

  •

  Apache License 2.0

  •269•26•0•0•Updated May 20, 2025May 20, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •3•8•0•0•Updated May 20, 2025May 20, 2025

• magic-variables

  Public
  🪄 Magic variables is a Burp extension that provides helpful replacements in traffic such as random integers, random UUIDs and random strings.

  extension

  Java

  •

  Other

  •1•0•0•0•Updated May 16, 2025May 16, 2025

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite DAST

  GNU Lesser General Public License v3.0

  •128•696•27•1•Updated May 15, 2025May 15, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •48•328•1•0•Updated May 14, 2025May 14, 2025

• collector-and-analyzer

  Public
  CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.

  Java

  •

  Apache License 2.0

  •73•1•0•0•Updated May 14, 2025May 14, 2025

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •9•168•17•0•Updated May 13, 2025May 13, 2025

• pdf-render

  Public
  BurpSuite extension that renders PDF files and allows viewing them in a custom tab in the response section inside the repeater

  extension

  Java

  •1•2•0•0•Updated May 7, 2025May 7, 2025

• url-cheatsheet-data

  Public
  This is the data that powers the PortSwigger URL validation bypass cheat sheet.

  JavaScript

  •9•49•1•0•Updated May 2, 2025May 2, 2025

• extension-template-project-wrapper

  Public
  Contains a ready-to-use extension template to help you start writing your extension immediately.

  Java

  •1•0•0•1•Updated May 1, 2025May 1, 2025