HackBar plugin for Burpsuite
-
Updated
Oct 19, 2018 - Java
#
burp-plugin
Here are 73 public repositories matching this topic...
reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
recaptcha
captcha
recognizes-images
burp-plugin
burpsuite
intruder
burp-extensions
recognize-captcha
-
Updated
Aug 26, 2020 - Java
A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或组织的子域名、相似域名、相关域名的burp插件
sitemap
spider
certificate
domains
subdomain
certification
burp-plugin
domain-discovery
burp-extensions
subject-alternative-name
subjectaltname
domain-hunter
similar-domain
https-certificate
burpsuite-extender
related-domain
organization-domain
subject-name
-
Updated
Aug 28, 2020 - Java
A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
cookie
menu
knife
burp
burp-plugin
burpsuite
burp-extensions
hackbar
burpsuite-extender
unicode-to-chinese
update-cookie
u2c
http-edit
header-edit
-
Updated
Nov 11, 2020 - Java
Automated HTTP Request Repeating With Burp Suite
-
Updated
Oct 8, 2020 - Java
Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly
aes-encryption
burp
burp-plugin
burpsuite
burp-extensions
decryptor
aes-decryption
burpsuite-extender
burp-ui
burpsuite-tools
-
Updated
Nov 12, 2018 - Java
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
-
Updated
Oct 18, 2020 - Python
Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
-
Updated
Oct 14, 2020 - Java
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).
-
Updated
Nov 13, 2020 - Java
A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
security-audit
blacklist
bitcoin
hacking
cryptocurrency
penetration-testing
web-security
bugbounty
hacking-tool
security-scanner
burp-plugin
burpsuite
security-tools
burp-extensions
blacklist-extension
burpsuitepro
coinhive
cryptojacking
coinhive-miners
web-application-hacking
-
Updated
Jul 8, 2019 - Python
Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
-
Updated
Jul 15, 2020 - JavaScript
A Burp Plugin for Detecting Weaknesses in Content Security Policies
-
Updated
Feb 24, 2016 - Python
Security checks pack for Burp Suite
-
Updated
Feb 8, 2018 - Java
Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
-
Updated
Apr 29, 2020 - Java
The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
-
Updated
Oct 27, 2020 - Python
SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.
sqli
bug-bounty
pentesting
bugbounty
evasion
bughunting
burp-plugin
burpsuite
payload-generator
sqlinjection
burp-extensions
burpsuite-pro
pentesting-tools
-
Updated
Aug 21, 2020 - Python
Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
-
Updated
Nov 9, 2018 - Java
Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).
yaml
parser
json
swagger
openapi
pentesting
restful-api
openapi-specification
burp-plugin
burpsuite
burp-extensions
openapi3
openapi-client
openapi2
-
Updated
Oct 2, 2020 - Java
CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef
-
Updated
Nov 30, 2020 - Java
SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing
windows
active-directory
penetration-testing
sql-injection
mssql
application-security
burp-plugin
burp-extensions
user-enumeration
-
Updated
May 10, 2020 - Python
burpsuite extension for check unauthorized vulnerability
-
Updated
Oct 7, 2020 - Python
Piper Burp Suite Extender plugin
-
Updated
Nov 26, 2020 - Kotlin
Burp extension helps in finding blind xss vulnerabilities
-
Updated
Jun 19, 2019 - Python
Burp Suite extension to passively scan for applications revealing server error messages
-
Updated
Nov 4, 2020 - Java
Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.
-
Updated
Dec 2, 2020 - Java
Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.
-
Updated
Sep 26, 2019 - Java
一键生成Java代码的burp插件/Generate Java script for fuzzing in Burp。
-
Updated
Apr 12, 2020 - Java
Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common misconfigurations and security holes.
java
security-audit
dispatcher
aem
adobe-experience-manager
burp
burp-plugin
security-automation
burp-extensions
-
Updated
Sep 13, 2020 - Java
Improve this page
Add a description, image, and links to the burp-plugin topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the burp-plugin topic, visit your repo's landing page and select "manage topics."
Currently, the headless scanner extension expects an XML based configuration file and this works ok. But, making the XML is cumbersome and also requires that most of the request URLs be wrapped in CDATA blocks.
IMHO, this would be much simpler, cleaner and much more concise in JSON than in XML, Also, the configuration files for Burp itself seem to be JSON based. So, this move will make it sor