opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
opentrap / opentrap
PortSwigger / BChecks
BChecks collection for Burp Suite Professional and Burp Suite DAST
six2dez / burp-ai-agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
PortSwigger / bambdas
Bambdas collection for Burp Suite Professional and Community.
jonaslejon / malicious-pdf
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
Fausto-404 / js-reverse-automation--skill
结合chrome-devtools-mcp的能力并加上Skill的规范，实现JSRPC+Flask+autoDecoder方案的前端JS逆向自动化分析，提升JS逆向的效率
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
PortSwigger / mcp-server
MCP Server for Burp
adrgs / requestrepo
Analyze HTTP, DNS and SMTP requests and create custom responses and DNS records for your subdomain
forefy / reburp
A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
sleeyax / burp-awesome-tls
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
C0DEbrained / BurpCustomizer
Because just a dark theme wasn't enough!
Spleefy167 / frida-orbit-lab
SpacePeng Trainer Frida Scripts and Game Hacking Examples 2026
Mr-xn / BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
hhhrrrttt222111 / Ethical-Hacking-Tools
Complete Listing and Usage of Tools used for Ethical Hacking
PortSwigger / turbo-intruder
Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
projectdiscovery / nuclei-burp-plugin
Nuclei plugin for BurpSuite
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
albinowax / ActiveScanPlusPlus
ActiveScan++ Burp Suite Plugin
eslam3kl / SQLiDetector
Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.
script-or-script / FlutterTap
Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
trinetlayer / Ghost-Js-Burp-Extension
Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise false-positive filter. Part of TrinetLayer.
RamanMG / Burp-MCP-Unrestricted
—
fdfsdfsdfss / spacepeng-frida-playground
SpacePeng Trainer 2026: Advanced Frida Script Examples & Game Hacks
tyler-youngzxv6238 / burp-suite-executor-scripts
A 2026 collection of practical Burp Suite scripts for security testers, combining hands-on automation, extension examples, and focused utilities in one organized repository.
armourinfosec / Offensive-Web-Application-Security
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
overspace-labs / amber
Read and write Burp Suite Proxy HTTP history, byte for byte.
DuskSwordsmanWrath / Burp-Suite-Professional
Burp Suite Professional for Windows — the complete professional build with every module enabled: HTTP inspection, web security testing, and API analysis, no edition limits after install.
overspace-labs / HaE
HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！
bit4woo / knife
A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
kN6jq / gatherBurp
一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。
kac89 / vulnrepo
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!