AutoRepeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

autochrome

autochrome 이 도구는 새로운 Chromium 사본을 다운로드, 설치 및 구성합니다. 다음과 같은 멋진 기능이 포함됩니다: 그 성가신 자동 업데이터를 모두 끄기! 높은 가시성을 위한 멋진 색상 테마! XSS 감사기 없음! 자동 프록시 구성! 127.0.0.1:8080 사용 TLS 인증서를 확인하지 않기 때문에 나타나는 성가신 인포바! 포함된 Burp 확장 프로그램을 설치하면 Burp와의 기본 통합 현재 다음 운영 체제가 지원됩니다: macOS 10.9 Mavericks 이상 Ubuntu 16.04 및 기타 XDG를 지원...

autochrome

autochrome This tool downloads, installs, and configures a shiny new copy of Chromium. It includes nifty things like: Turning off all those annoying auto-updaters! Sweet colored themes for high visibility! No XSS auditor! Automatic proxy configuration! uses 127.0.0.1:8080 An annoying infobar...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf は現在、PyPi 上にbbpb という名前の公式パッケージがあります。 blackboxprotobuf パッケージは古いフォークです 説明 Blackbox Protobuf は、エンコードされた Protocol Buffers protobuf を対応する protobuf 定義なしで扱うためのツール群です。 Protobuf は、Google によるバイナリ直列化フォーマットであり、JSON や XML のようなフォーマットの より効率的な代替手段として使用できます。開発者は .proto...

mongobleedburp

MongoBleed Burp Extension Burp Suite extension to detect CVE-2025-14847 MongoBleed via manual leak tests from a dedicated UI tab. Repository: https://github.com/j0lt-github/mongobleedburp Current version: 1.1.0 Features Manual test UI tab with host/port and min/max offsets Temporary-file leak...

BurpSuiteHTTPSmuggler

Burp Suite HTTP Smuggler A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques. This extension has been developed by Soroush Dalili @irsdl from NCC Group. The initial release v0.1 only supports the Encoding capability that can be quite...

BurpImportSitemap

Import To Sitemap Extension Import To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap. It also includes a contextual menu to send request/response items from any tab to the sitemap. License Released as open source by NCC Group Plc -...

burp-reflux

Burp Proxy reflux log parser: Burp proxy text log converter to CSV and SQLLite Reflux for Burp log parsing and conversion Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

Decoder-Improved

Decoder Improved tl;dr Within extender load Decoder-Improved.jar latest release For a walkthrough on how to extend Decoder Improved visit ourblog post. The link to the original description seems to be broken. While there's no up-to-date walkthrough about how to extend Decoder Improved at the...

CollaboratorPlusPlus

CollaboratorPlusPlus Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Corey Arthur, [email protected] http://www.github.com/nccgroup/CollaboratorPlusPlus This project is released under AGPL see LICENSE for more information Download from releases here. Backgrou...

Extractor

Installation Instructions For Those That Don't Want to Compile Themselves: 1. Download Google's GSON library from Maven http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar wget http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar 2. In Burp's...

HTTPSignatures

HTTPSignatures Burp Suite Extension HTTPSignatures is a Burp Suite extension that implements the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 specification draft document. This allows Burp Suite users to seamlessly test applications that require HTTP Signatures. Features...

JDSer-ngng

JDSer-ngng A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library. Why? This release fixes the bug in the other implementation in JDSer-ng which didn't actually allow modification of the request. Also extends it further, allowing proper use of...

jwt-reauth

JWT Re-auth Burp plugin to cache authentication tokens from an "auth" URL, and then add them as headers on all requests going to a certain scope. Features The plugin allows settings to be sent to it via context menus from various menus. This includes using an entire captured request to acquire ne...

LoggerPlusPlus

Logger++ Advanced Logging for Burp Suite Developed by Corey Arthur Originally by Soroush Dalili Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under AGPL-3.0 see LICENSE for more information Description Logger++ is a multithreaded logging extension for Burp Suite. I...

pcap-burp

This project provides a Burp Suite extension for importing and passively scanning Pcap/Pcapng files with Burp. It can be used in cases where a HTTP client does not support proxying but it would be useful to scan, inspect or replay the HTTP traffic using Burp. Building from Source optional The Ant...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

WCFDSer-ngng

WCFDSer-ngng A Burp Extender plugin, that will make binary soap objects readable and modifiable. Based on the original work of Brian Holyfield, all hail Brian http://blog.gdssecurity.com/labs/2009/11/19/wcf-binary-soap-plug-in-for-burp.html Why? This release fixes a bug where serialization wasn't...

burp-jq

Burp JQ This is a Burp Extension to apply jq queries to JSON content from the HTTP message viewer. Build $ gradle fatJar Credits Burp JQ relies on jackson-jq, a Java implementation of jq. jq jackson jackson-jq...

GadgetProbe

설명 방금 Java 역직렬화 버그를 발견했고, 모든 ysoserial 페이로드를 실행했는데.... 아무것도 나오지 않았나요? 이제 어떻게 해야 할까요? 완전히 눈이 먼 상태에서 가젯 체인을 디버깅하거나 어떻게 구축할 수 있을까요? 원격 클래스패스에 빛을 비추고 모든 이들의 버그 심각도를 높여주는 도구, GadgetProbe를 소개합니다! GadgetProbe는 Java 클래스 워드리스트를 받아 직렬화된 DNS 콜백 객체를 출력하고, 원격 클래스패스에 숨어 있는 것이 무엇인지 보고합니다. Burp 확장 프로그램 사용법 Burp ...