Burp Suite

A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.

A Docker-based penetration testing toolkit that provides a portable environment with GUI support and pre-installed security tools for web application testing and CTF activities.

A collection of payloads and methodologies for web pentesting.

A collection of Local File Inclusion (LFI) vulnerability tests and exploitation techniques designed for use with Burp Suite.

InQL is a Burp Suite extension for advanced GraphQL testing and vulnerability detection

A Burp Suite extension that passively scans JavaScript files to discover endpoint links and potential attack surfaces in web applications.

Femida is a Python automation tool that integrates with Burp Suite to detect blind XSS vulnerabilities in web applications through HTTP request analysis.

A Burp Suite extension that automates XSS vulnerability detection and validation through custom payload generation and response analysis.

A Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

A Burp Suite extension that detects NGINX alias traversal vulnerabilities by analyzing HTTP traffic patterns to identify path traversal misconfigurations.

A Burp Suite extension that formats GraphQL requests for easier reading

A Burp Suite extension that uses Shodan to discover cloud buckets and tests them for publicly accessible vulnerabilities through passive scanning.

Automatic authorization enforcement detection extension for Burp Suite

A Burp Suite plugin that extracts keywords from HTTP responses using regex patterns and tests for reflected XSS vulnerabilities within the target scope.

A comprehensive repository of payloads and bypass techniques for web application security testing and penetration testing across multiple platforms and attack vectors.

A Burp Suite plugin for automatically adding XSS and SQL payload to fuzz

A Python-based Burp Suite extension that integrates Yara scanning capabilities for detecting patterns and signatures in web application traffic using custom Yara rules.

A collection of Yara rules for the Burp Yara-Scanner extension that helps identify malicious software and infected web pages during web application security assessments.

A Burp Suite plugin that performs intelligent content discovery by analyzing current requests to identify directories, files, and variations based on the application's structure.