Admin-Panel_Finder

Admin Panel Finder A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this...

burpgpt

!IMPORTANT Anunciamos el lanzamiento de BurpGPT Pro, la edición específicamente diseñada para satisfacer las necesidades de profesionales y boutiques de ciberseguridad. Descubra una gran cantidad de funciones potentes y una interfaz fácil de usar que mejora sus capacidades y garantiza una...

burp-dom-scanner

Burp DOM 扫描器 这是一个 Burp Suite 的扩展，用于对单页应用进行递归爬取和扫描。 它会运行一个 Chromium 浏览器来扫描网页中的基于 DOM 的 XSS。 它还可以收集爬取期间发出的所有请求（XHR、fetch、websocket 等），允许将它们转发到 Burp 的 Proxy、Repeater 和 Intruder。 需要 node 和 DOMDig。 下载 最新版本可以在此下载。 安装 1. 安装 node 2. 安装 DOMDig 3. 下载并加载扩展 4. 在扩展的 UI 中设置 node 可执行文件的路径以及 domdig.js 的路径。 扫描引擎...

Burp-Encode-IP

About This extension will encode an IP address into a bunch of less known encoding techniques. This technique is focused on testing vulnerabilities such as SSRF Server-Side Request Forgery, Open Redirect or RFI Remote File Inclusion. TL;DR Easy Install If you have Burp Pro it is possible to insta...

mole

Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...

reflector

reflector 描述 Burp Suite 扩展能够实时在浏览网站时发现页面上的反射型 XSS，并包含以下特性： 在响应标签页中高亮显示反射内容。 测试该反射中允许哪些符号。 分析反射上下文。 Content-Type 白名单。 如何使用 安装插件后，您只需开始操作被测 Web 应用程序。每当发现反射时，reflector 会定义严重性并生成 Burp issue。 每个 Burp issue 包含有关反射参数的详细信息，例如： 该反射中允许的符号。 在响应中高亮显示反射值。 反射上下文分析。 允许的符号分析 当发现反射并且启用了"Aggressive...

BurpParamFlagger

BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI. Note: I believe that Burp Pro is required to use this extension, since it adds onto the scanner functionality, which isn't included in the...

react2shell-burp

React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...

bradamsa

Bradamsa Bradamsa is a Burp Suite extension for Radamsa, a well-known fuzzer made by the Oulu University Secure Programming Group. Inspired by burp-radamsa, this plugin allows to generate Intruder payloads using Radamsa. Download the latest release from HERE. Mix Burp Suite + Radamsa and you get...

BurpSuiteSharpenerEx

Burp Suite Sharpener यह एक्सटेंशन Burp Suite में कई UI और कार्यात्मक सुविधाएँ जोड़कर उसे बेहतर बनाता है, जिससे यह अधिक उपयोगकर्ता-अनुकूल हो जाता है। संगतता के बारे में विस्तृत जानकारी के लिए "Burp Suite संगतता और त्रुटि रिपोर्टिंग" अनुभाग देखें। root@kitploit: / | | . \ | . | || '| . / .| ' |/ .|...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp-Erweiterung Funktionen Passives Scannen : Automatische Erkennung aller Next.js-Websites, die durch Burp gehen. In-Memory-Code-Injektion v2.2 Neu! Rechtsklicken Sie auf die Zielanfrage und wählen Sie AntSword-In-Memory-Code injizieren. Unterstützt GET- und POST-Type...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE-Scanner Burp-Suite-Erweiterung Eine hochpräzise Burp-Suite-Erweiterung zur Erkennung der Next.js / React Server Components RSC Remote Code Execution -Schwachstelle CVE-2025-55182 & CVE-2025-66478. Diese Erweiterung implementiert die vom Searchlight Cyber Security Research Team...

BurpWpsScan

Entwicklung unterstützen Wenn dieses Projekt Ihre Arbeit unterstützt, tragen Sie zur laufenden Wartung und zu neuen Funktionen bei. ETH-Spenden-Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scannen Sie den QR-Code oder kopieren Sie die Wallet-Adresse oben. BurpWpsScan Eine Burp...

reDOM

reDOM root@kitploit: ██████╗ ███████╗██████╗ ██████╗ ███╗ ███╗ ██╔══██╗██╔════╝██╔══██╗██╔═══██╗████╗ ████║ ██████╔╝█████╗ ██║ ██║██║ ██║██╔████╔██║ ██╔══██╗██╔══╝ ██║ ██║██║ ██║██║╚██╔╝██║ ██║ ██║███████╗██████╔╝╚██████╔╝██║ ╚═╝ ██║ ╚═╝ ╚═╝╚══════╝╚═════╝ ╚═════╝ ╚═╝ ╚═╝ Un'estensione per Burp...

web3-decoder

Web3 Decoder Web3 Decoder es una extensión de Burp Suite que ayuda a analizar qué está sucediendo con las operaciones que involucran contratos inteligentes de web3. Se trata principalmente de llamadas JSON-RPC a nodos de Ethereum y a nodos de otras redes compatibles como Polygon, Arbitrum, BSC...

SILENTCHAIN

SILENTCHAIN AI™ - Community Edition 🔗 ⛓️ 🔒 KI-gestützte passive Schwachstellenanalyse für Burp Suite Intelligent • Lautlos • Adaptiv • Umfassend 🚀 Schnellstart • 📖 Dokumentation • 🔧 Konfiguration • 📊 Benchmarks • ⬆️ Upgrade auf Pro...

react2shell-burp v0.1.1

React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...

POC-Generator-Burp_Suite_Extension

🎯 POC Generator - Burp Suite Extension From vulnerability...

Exploit for Unrestricted Upload of File with Dangerous Type in Sap Netweaver

CVE-2025-31324 Burp Suite Extension Overview This Python-b...

SSTImap - Automatic SSTI Detection Tool With Interactive Interface

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive penetration testing tool for SSTI detection...