Burp Suite extension that bypasses Cloudflare TLS fingerprinting (JA3/JA4 + HTTP/2) with a real browser fingerprint. Zero-config, cross-platform. - Re13orn/BypassCloudflare

Physical modeling synthesizer of human anatomy with the parameters and control tailored to burping/belcing. - daymonCKerns/burpSynth

Burp Suite extension that finds SQL injection candidates in proxy traffic, launches sqlmap in a terminal against them, and tracks what has already been tested. - BokkaPig/burp-sqlmap-launcher

Contribute to PurpleTeamSoftwareSolutions/cyberoptix.burp-extension development by creating an account on GitHub.

Fuzzer concurrente de métodos HTTP y path traversal para microservicios SOAP/HTTP. Acepta curl o colecciones Postman, enruta por Burp y detecta malas prácticas analizando solo cabeceras y códigos d...

Authorized intranet black-box testing agent: scoped login, Burp/HAR triage, human-gated validation, JNDI plan-only, and portable reports. - devastatingglamour/intranet-pentest-agent

Burp Suite extension that decodes \uXXXX escapes and render text correctly in Request/Response editors. - Parsaaaw/BurpSuite-Unicode-Persian-Viewer

SecretSifter Burp MCP — full edition with multi-provider AI Triage and Claude Code MCP integration. Burp Suite extension for secret detection. - secretsifter/secretsifter-burp-mcp

A passive Burp Suite extension that maps website functionality from captured traffic, recommends attack vectors with supporting evidence, and guides manual testing with checklists, Focus Mode, inve...

Burp Buddy is a Burp Suite extension that integrates Large Language Models (LLMs) to assist security researchers with vulnerability analysis, attack vector generation, and HTTP traffic understandin...

Burp Suite extension: passive check for missing or weak HTTP security headers on in-scope responses (Montoya API). - Excession-Labs/burp-security-headers

Burp Suite MCP extension for AI-assisted HTTP inspection and transformation - sangamLPU/burp-mcp-v1.5

Burp Suite screenshots extension for documenting findings in technical reports - MishelB-CG/BurpShot

A Burp Suite extension that adds a dedicated PHP code editor to Repeater, featuring syntax highlighting, automatic PHP detection, and seamless editing of PHP payloads within HTTP requests, includin...

Local-first pentest finding extractor and report engine for Nmap, Nuclei, ZAP, Burp, Nessus, and Trivy (Markdown, HTML, JSON, CSV). - gencay-e/scanfuse

UploadHunt is a Burp Suite extension designed to help security researchers and bug bounty hunters identify potential file-upload vulnerabilities. Using a rule-based hypothesis engine. - tobiasGuta/...

Firefox containers for security testing and bug bounty hunting, with isolated sessions, per-container proxies, User-Agent overrides, and Burp Suite integration through dedicated proxy listeners. - ...

burp extension for authorization testing (jython). Contribute to InstructorBixby/burp-authz development by creating an account on GitHub.

burp extension: inspect and diff session tokens. Contribute to InstructorBixby/burp-tokenscope development by creating an account on GitHub.

burp extension for authorization testing (jython). Contribute to c01n31pan1c/burp-authz development by creating an account on GitHub.