opentrap / opentrap
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
opentrap / opentrap
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
jonaslejon / malicious-pdf
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
sleeyax / burp-awesome-tls
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
six2dez / burp-ai-agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Fausto-404 / js-reverse-automation--skill
结合chrome-devtools-mcp的能力并加上Skill的规范，实现JSRPC+Flask+autoDecoder方案的前端JS逆向自动化分析，提升JS逆向的效率
Mr-xn / BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
hhhrrrttt222111 / Ethical-Hacking-Tools
Complete Listing and Usage of Tools used for Ethical Hacking
bit4woo / knife
A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
PortSwigger / turbo-intruder
Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
projectdiscovery / nuclei-burp-plugin
Nuclei plugin for BurpSuite
PortSwigger / mcp-server
MCP Server for Burp
PortSwigger / BChecks
BChecks collection for Burp Suite Professional and Burp Suite DAST
kN6jq / gatherBurp
一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。
albinowax / ActiveScanPlusPlus
ActiveScan++ Burp Suite Plugin
eslam3kl / SQLiDetector
Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.
C0DEbrained / BurpCustomizer
Because just a dark theme wasn't enough!
kac89 / vulnrepo
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!
adrgs / requestrepo
Analyze HTTP, DNS and SMTP requests and create custom responses and DNS records for your subdomain
PortSwigger / bambdas
Bambdas collection for Burp Suite Professional and Community.
script-or-script / FlutterTap
Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
forefy / reburp
A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
trinetlayer / Ghost-Js-Burp-Extension
Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise false-positive filter. Part of TrinetLayer.
RamanMG / Burp-MCP-Unrestricted
—
fdfsdfsdfss / spacepeng-frida-playground
SpacePeng Trainer 2026: Advanced Frida Script Examples & Game Hacks
Spleefy167 / frida-orbit-lab
SpacePeng Trainer Frida Scripts and Game Hacking Examples 2026
tyler-youngzxv6238 / burp-suite-executor-scripts
A 2026 collection of practical Burp Suite scripts for security testers, combining hands-on automation, extension examples, and focused utilities in one organized repository.
armourinfosec / Offensive-Web-Application-Security
A lab-driven course on breaking web applications and explaining how to fix them — 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
overspace-labs / amber
Read and write Burp Suite Proxy HTTP history, byte for byte.
DuskSwordsmanWrath / Burp-Suite-Professional
Burp Suite Professional for Windows — the complete professional build with every module enabled: HTTP inspection, web security testing, and API analysis, no edition limits after install.
overspace-labs / HaE
HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！