JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing. - pinnace/burp-jwt-fuzzhelper-extension

Automated blind-xss search for Burp Suite. Contribute to wish-i-was/femida development by creating an account on GitHub.

BurpelFish - Adds Google Translate to Burp's Context Menu. "Babel Fish" language translation for app-sec testing in other languages. - PortSwigger/burpelfish

BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution. - righettod/virtua...

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. - PortSwigger/turbo-intruder

WSDL Parser extension for Burp. Contribute to NetSPI/Wsdler development by creating an account on GitHub.

Contribute to PortSwigger/freddy-deserialization-bug-finder development by creating an account on GitHub.

A natural evolution of Burp Suite's Repeater tool. Contribute to CoreyD97/Stepper development by creating an account on GitHub.

Burp Extension for a passive scanning JS files for endpoint links. - InitRoot/BurpJSLinkFinder

Contribute to ettic-team/EndpointFinder-Burp development by creating an account on GitHub.

A short time ago, I had to set up a private Burp Collaborator Server to avoid possible leaks of my client´s sensitive information. I want…

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities - BitTheByte/BitBlinder

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL

Burp Suite extension to easily export sub domains. Contribute to Regala/burp-subdomains development by creating an account on GitHub.

Update: The explanation below explains the step for ARMv7. For ARMv8 (64bit), see this blogpost. ⚠️ Update August 2022 ⚠️An update to this blog post was written and can be found here. It …

In this post, I will discuss a few tricks for creating Burp extensions in Python that deal with cryptography. Our example is a Burp extension that adds a new tab to decode and decrypt an application's traffic. This allows us to modify payloads on the fly…