Repositories list

• collaborator-everywhere-v2

  Public
  An improved version of the CollaboratorEverywhere Burp extension

  Java

  •

  MIT License

  •1•0•0•0•Updated Jul 11, 2025Jul 11, 2025

• xss-cheatsheet-data

  Public
  This repository contains all the XSS cheatsheet data to allow contributions from the community.

  Other

  •85•429•1•1•Updated Jul 11, 2025Jul 11, 2025

• extension-template-project-wrapper

  Public
  Contains a ready-to-use extension template to help you start writing your extension immediately.

  Java

  •2•1•0•1•Updated Jul 11, 2025Jul 11, 2025

• pycript-websocket

  Public
  Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty in WebSocket

  extension

  Java

  •

  GNU General Public License v3.0

  •10•0•0•0•Updated Jul 8, 2025Jul 8, 2025

• dev-sec-box

  Public
  DevSecBox simplifies tasks for Bug Hunters and DevSecOps. It works with the command line, integrates with any tools, and manages your workflows.

  extension

  Java

  •

  GNU Affero General Public License v3.0

  •2•1•0•0•Updated Jul 8, 2025Jul 8, 2025

• delete-bytes

  Public
  Delete X number of bytes from an editable request or response.

  extension

  Java

  •1•0•0•0•Updated Jul 8, 2025Jul 8, 2025

• repeater-strike

  Public
  extension

  Java

  •1•0•0•0•Updated Jul 8, 2025Jul 8, 2025

• report-generator

  Public
  Burp Report Generator

  extension

  Java

  •

  MIT License

  •2•0•0•0•Updated Jul 8, 2025Jul 8, 2025

• magic-variables

  Public
  🪄 Magic variables is a Burp extension that provides helpful replacements in traffic such as random integers, random UUIDs and random strings.

  extension

  Java

  •

  Other

  •1•0•0•0•Updated Jul 8, 2025Jul 8, 2025

• copy-request-response

  Public
  Burp extension for quickly copying request/response data.

  extension

  Java

  •17•9•0•0•Updated Jul 8, 2025Jul 8, 2025

• java-object-deserializer

  Public
  BurpJDSer-ng

  Java

  •14•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• log-requests-to-sqlite

  Public
  BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

  extension

  Java

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •9•172•19•0•Updated Jul 7, 2025Jul 7, 2025

• pwnfox-for-chromium

  Public
  A BurpSuite extension that allows you to use Chromium with PwnFox

  Java

  •

  MIT License

  •5•0•0•0•Updated Jul 7, 2025Jul 7, 2025

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •56•345•1•2•Updated Jul 4, 2025Jul 4, 2025

• ununicode

  Public
  "de-unicode" unicode escaped sequenses

  extension

  Java

  •4•1•0•0•Updated Jul 3, 2025Jul 3, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •19•148•2•1•Updated Jul 1, 2025Jul 1, 2025

• splitting-the-email-atom

  Public
  HTML

  •8•81•0•0•Updated Jun 27, 2025Jun 27, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•4•0•0•Updated Jun 26, 2025Jun 26, 2025

• enterprise-helm-charts

  Public
  Helm charts for Burp Suite DAST Kubernetes installation.

  kubernetesenterpriseburp+ 2dasthelm-chart

  Smarty

  •

  Apache License 2.0

  •9•5•2•3•Updated Jun 26, 2025Jun 26, 2025

• twilio-otp-authenticator

  Public
  This extension utilizes session handling rules to provide a Twilio OTP code to outgoing requests, used in BurpSuite Pro

  extension

  Java

  •1•0•0•0•Updated Jun 26, 2025Jun 26, 2025

• aws-curl-command

  Public
  Burp Extension to create AWS Curl and cURL with SigV4 commands from an API

  extension

  Python

  •3•1•0•0•Updated Jun 26, 2025Jun 26, 2025

• get-all-parameters

  Public
  Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

  Python

  •148•22•0•0•Updated Jun 25, 2025Jun 25, 2025

• mcp-server

  Public
  MCP Server for Burp

  extension

  Kotlin

  •

  GNU General Public License v3.0

  •29•207•8•3•Updated Jun 24, 2025Jun 24, 2025

• image-location-scanner

  Public
  Scan for GPS location exposure in images with this Burp & ZAP plugin.

  Java

  •

  Apache License 2.0

  •9•5•0•0•Updated Jun 13, 2025Jun 13, 2025

• pentagrid-scan-controller

  Public
  Improve automated and semi-automated active scanning in Burp Pro

  Kotlin

  •4•7•0•0•Updated Jun 13, 2025Jun 13, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  Java

  •

  MIT License

  •79•32•0•0•Updated Jun 13, 2025Jun 13, 2025

• json-web-tokens

  Public
  JWT Support for Burp

  Java

  •

  GNU General Public License v3.0

  •47•114•0•0•Updated Jun 13, 2025Jun 13, 2025

• http-request-smuggler

  Public
  Java

  •

  Other

  •108•1k•9•2•Updated Jun 13, 2025Jun 13, 2025

• api-exporter

  Public
  Java

  •2•0•0•0•Updated Jun 12, 2025Jun 12, 2025