CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner Plugin de escaneo pasivo de burpsuite basado en la detección de la vulnerabilidad CVE-2025-55182, usando JDK 17 Uso del plugin: Escaneo predeterminado del historial / escaneo activo con clic derecho, al detectar una vulnerabilidad se dirige automáticamente al módulo...

tmux

Welcome to tmux! tmux is a terminal multiplexer: it enables a number of terminals to be created, accessed, and controlled from a single screen. tmux may be detached from a screen and continue running in the background, then later reattached. This release runs on OpenBSD, FreeBSD, NetBSD, Linux,...

web3-decoder

Web3 Decoder Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks like Polygon, Arbitrum, BSC... Download & Install Download...

Solr-SSRF

Solr-SSRF CVE-2021-27905 El paquete repeat del archivo de Burp contiene los pasos específicos para la reproducción El POC es un plugin de detección de Xray...

burpsuiefakeip

Reposted from https://github.com/TheKingOfDuck/burpFakeIP BurpFakeIP Forging IP in Burp Suite, and I'm dead serious. Four small features Forge a specified IP Forge a local IP Forge a random IP Random IP brute-forcing 0x01 Forge a specified IP In the Repeater module, right-click to select the fake...

Automated-blind-xss-search-for-Burp-Suite

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/ianxtianxt/Automated-blind-xss-search-for-Burp-Suite.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field...

crlf-powered-desync-scanner

CRLF-Powered Desync Scanner This is the Burp Extension we used to detect all cases from our research CRLF-Powered Desync Attacks: Beheading HTTP Streams. It's a research-first scanner built using BulkScan similar to HTTP Request Smuggler and others. Implementation Request Header Injection probe...

SleuthQL

SleuthQL Description SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers into each parameter where the SQL-esque variables were identified. Supported Request Types SleuthQL requires an export of...

burp-alfresco-referer-proxy-cve-2014-9301

burp-alfresco-referer-proxy-cve-2014-9301...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...

IPRotate_Burp_Extension

IPRotateBurpExtension Extensión para Burp Suite que utiliza AWS API Gateway para cambiar tu IP en cada solicitud. Más información: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Nota/Advertencia Este método de usar AWS API Gateways para ofuscar la IP de origen ahora se considera...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

SQLiDetector

SQLiDetector Script simple en Python compatible con el perfil BurpBounty que te ayuda a detectar inyecciones SQL "basadas en errores" enviando múltiples solicitudes con 14 payloads y verificando 152 patrones regex para diferentes bases de datos. root@kitploit:...

pipe-intercept

pipe-intercept Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools Named Pipes are very popular for interprocess communication on Windows. They are used in many applications, including Windows Remote Procedure Call RPC. The purpose of this tool is to allow security...

Java-Deserialization-Scanner

Java Deserialization Scanner Java Deserialization Scanner is a Burp Suite plugin aimed at detect and exploit Java deserialization vulnerabilities. It was written by Federico Dotta, Principal Security Analyst at HN Security. The plugin is made up of three different components: 1. Integration with...

PwnFox

PwnFox PwnFox es una extensión de Firefox/Burp que proporciona herramientas útiles para tu auditoría de seguridad. Si eres usuario de Chrome, puedes visitar https://github.com/nccgroup/autochrome. PwnFox Funcionalidades Un solo clic en BurpProxy Perfiles de Contenedores Registrador de PostMessage...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was originally created by Roland Bischofberger and Emanuel Duss...

JSAnalyzer

JS Analyzer - Burp Suite Extension by Jensec https://x.com/jensec A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The goal is reduce noise as much as possible to ensu...

BurpBounty

Burp Bounty Free - Constructor de Comprobaciones de Escaneo BApp Store Esta extensión de Burp Suite te permite, de una manera rápida y sencilla, mejorar el escáner activo y pasivo de BurpSuite mediante reglas personalizadas a través de una interfaz gráfica muy intuitiva. Mediante una búsqueda...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...