Contribute to n00bcooD3R/burp-pro development by creating an account on GitHub.

Script library and Docker file for running a containerized session of BurpSuite. This can be good for security professionals and testing potentially harmful links. - scriptTester1381/IsolatedBurp

Burp Suite extension for URLs and Params collecting - EvalRot/Paramamador

Contribute to confidentialwebapp/Burp-Xpose development by creating an account on GitHub.

A Burp Suite extension for decoding, editing, and re-signing JSON Web Tokens (JWTs) during penetration testing. Inspired by jwt.io but living inside Burp where you need it. - umsundu/JWT-Tamper-Bur...

This Lab covers real-world web attack techniques: intercepting HTTP requests with Burp Suite, dumping databases via SQLMap, bypassing access controls via IDOR, hijacking sessions through XSS, and e...

Burp Suite plugin that provides cyberspace asset search capabilities to AI assistants through MCP protocol - Minshenyao/querySecMCP

Local, screen-reader-friendly web application pentesting suite — proxy, repeater, intruder, decoder and more — built as semantic HTML5 so NVDA/JAWS/Orca/VoiceOver users get a real Burp alternative....

GhostSSO -- Burp Suite Extension to automate SSO login - dedsecLab/GhostSSO

听风 Burp Agent：一个基于官方 Burp MCP 的 AI 安全测试助手，让 AI 通过 Burp Suite 自动分析流量、读取响应、调用工具、加载 Skills，并辅助完成授权渗透测试流程。 - 0xTingFengSec/Burp-Agent

Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic intact. It applies user-defined replace rules, removes authe...

Save Creds is a lightweight Burp Suite extension that helps users collect, manage, and export credentials (Cookies, Tokens, JWTs) as a wordlist. - thiennbd/Save-Creds

Simple MCP bridge for Windows Burp Suite, WSL, Agent-AI, Codex, MCP CLI, and IDE workflows. - 6jeffr3y/burpsuite-mcp-bridge

AI gateway for Burp Suite — expose Burp's full toolchain to MCP clients - Nixon-H/BurpGate

Burp Suite extension that color-codes proxy history entries based on listener port. Similar to PwnFox but port-based. - dhakal-bibek/deduplighter

Popcorn HTB write-up covering advanced directory fuzzing, file upload bypass via magic numbers/extension spoofing using Burp Suite, and privilege escalation via CVE-2010-0832 (PAM MOTD File Tamperi...

HeaderForge - Burp suite Extension. Contribute to dedsecLab/HeaderForge development by creating an account on GitHub.

Burp Suite plugin for the Dradis Framework. Contribute to dradis/dradis-burp development by creating an account on GitHub.

Session Guard — Burp Suite Extension. Contribute to dedsecLab/Session-Guard development by creating an account on GitHub.

This tool utilizes the Java Instrumentation API for runtime bytecode manipulation. Functioning as an agent, it employs the ASM framework to intercept class loading, patching cryptographic logic and...