auth_analyzer

Auth Analyzer Table of Contents What is it? Why should I use Auth Analyzer? GUI Overview Parameter Extraction Auto Extract From To String Static Value Prompt for Input Parameter Replacement Replacement Location Parameter removement Sample Usage Auto extract session Cookie Session Header and CSRF...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: pip install webtech It can be also installed via setup.py: python setup.py install --user Burp Integration Download Jython 2.7.0 standalone and install it into Burp. ...

GAP-Burp-Extension

About - v6.3 This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on, and produces a target specific wordlist to use for fuzzing. The full Help...

inql

InQL v6.1.2 - Burp Extension for Advanced GraphQL Testing !Doyensec Research...

BurpCopyIssues

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpCopyIssues Burp Suite extension for browsing, copying, and exporting scan...

crlf-powered-desync-scanner

CRLF-Powered Desync Scanner This is the Burp Extension we used to detect all cases from our research CRLF-Powered Desync Attacks: Beheading HTTP Streams. It's a research-first scanner built using BulkScan similar to HTTP Request Smuggler and others. Implementation Request Header Injection probe...

Airachnid-Burp-Extension

Web Cache Deception Burp Extension A Burp extension to test applications for vulnerability to the Web Cache Deception attack. Once the extension has been loaded, it can be accessed in the Target - Sitemap tab and right click on the resource that should be tested. A context sensitive menu item...

autochrome

autochrome This tool downloads, installs, and configures a shiny new copy of Chromium. It includes nifty things like: Turning off all those annoying auto-updaters! Sweet colored themes for high visibility! No XSS auditor! Automatic proxy configuration! uses 127.0.0.1:8080 An annoying infobar...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf ahora tiene un paquete oficial en PyPi bajo el nombrebbpb. El paquete blackboxprotobuf es un fork más antiguo Descripción Blackbox Protobuf es un conjunto de herramientas para trabajar con Protocol Buffers protobuf codificados sin la definición protobuf...

Telewreck

Telewreck A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248. This extension is based on the original exploit tool written by Paul Taylor @bao7uo which is available at https://github.com/bao7uo/dpcrypto. Credits and big thanks to him. A related blog post...

inql

InQL v6.1.2 - Extensión de Burp para Pruebas Avanzadas de GraphQL !Doyensec Research...

burp-jq

Burp JQ This is a Burp Extension to apply jq queries to JSON content from the HTTP message viewer. Build $ gradle fatJar Credits Burp JQ relies on jackson-jq, a Java implementation of jq. jq jackson jackson-jq...

GadgetProbe

Descripción Acabas de encontrar un bug de deserialización de Java, ejecutaste todos tus payloads de ysoserial y... no obtuviste nada. ¿Y ahora qué? ¿Cómo puedes depurar o construir una cadena de gadgets si estás completamente a ciegas? Te presentamos GadgetProbe, una herramienta que arroja luz...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

generator-burp-extension

Generador de Extensiones Burp !NPM versionnpm-imagenpm-url Instalación Primero, instala Yeoman y generator-burp-extension usando npm asumimos que ya tienes preinstalado node.js. npm install -g yo npm install -g generator-burp-extension Luego genera tu nuevo proyecto: yo burp-extension...

generator-burp-extension

Burp Extension Generator Installation First, install Yeoman and generator-burp-extension using npm we assume you have pre-installed node.js. npm install -g yo npm install -g generator-burp-extension Then generate your new project: yo burp-extension Burp Extension features When you generate your...

ator

Extensor de Obtención y Reemplazo de Tokens de Autenticación Introducción En el mundo de las pruebas de seguridad web, la automatización es clave y Burp Suite es la opción preferida. Sin embargo, para aprovechar realmente el poder de Burp para el escaneo automatizado, necesitas los complementos...

femida

Femida-xss En desarrollo Un plugin automatizado de búsqueda de blind-xss para Burp Suite. Instalación Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Añadir - buscar y seleccionar blind-xss.py Cómo usar Configuración Primero, debes configurar tu URL de callback en el campo...

Cookie-Swapper

Cookie Swapper Burp Suite extension that auto-replaces cookies and headers in requests. Stop wasting time copy-pasting session tokens into every request. Why? You got a retest, a needs more info bug, or just expired sessions. You need to replay dozens of requests from HTTP History and Repeater bu...

Log4J-Scanner

Burp extension to scan Log4Shell CVE-2021-44228 vulnerability with custom payloads. Disclaimer I am not responsible for your actions, burp-suite freezing, target getting hacked, thermonuclear war, or the current economic crisis caused by you following these directions. YOU are choosing to use thi...