A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

构建优化高效的渗透 fuzz 字典合集

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

HackBar plugin for Burpsuite

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

Burp Suite Certified Practitioner Exam Study

OneScan 是一款用于递归目录扫描的 BurpSuite 插件

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

Burp Plugin to decrypt AES encrypted traffic on the fly

HTTP file upload scanner for Burp Proxy

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

SAML2 Burp Extension

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Bugbounty scope tool

gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)

Automate security tests using Burp Suite.