Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. - PortSwigger/turbo-intruder

WSDL Parser extension for Burp. Contribute to NetSPI/Wsdler development by creating an account on GitHub.

Contribute to PortSwigger/freddy-deserialization-bug-finder development by creating an account on GitHub.

A natural evolution of Burp Suite's Repeater tool. Contribute to CoreyD97/Stepper development by creating an account on GitHub.

Burp Extension for a passive scanning JS files for endpoint links. - InitRoot/BurpJSLinkFinder

Contribute to ettic-team/EndpointFinder-Burp development by creating an account on GitHub.

A short time ago, I had to set up a private Burp Collaborator Server to avoid possible leaks of my client´s sensitive information. I want…

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities - BitTheByte/BitBlinder

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap. - RhinoSecurityLabs/SleuthQL

Burp Suite extension to easily export sub domains. Contribute to Regala/burp-subdomains development by creating an account on GitHub.

Update: The explanation below explains the step for ARMv7. For ARMv8 (64bit), see this blogpost. ⚠️ Update August 2022 ⚠️An update to this blog post was written and can be found here. It …

In this post, I will discuss a few tricks for creating Burp extensions in Python that deal with cryptography. Our example is a Burp extension that adds a new tab to decode and decrypt an application's traffic. This allows us to modify payloads on the fly…

  Research By: Dikla Barda, Roman Zaikin and Oded Vanunu According to sources, WhatsApp, the Facebook-owned messaging application has over 1.5 billion users in over 180 countries. The average user checks WhatsApp more than 23 times per day. And, the number…

In order to bypass IP based blocking, we at Rhino Security Labs created a Burp Suite extension that uses AWS API Gateway to change your IP on every request.

Contribute to PortSwigger/http-request-smuggler development by creating an account on GitHub.