PortSwigger

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

BChecks collection for Burp Suite Professional and Burp Suite DAST

Finds unknown classes of injection vulnerabilities

Bambdas collection for Burp Suite Professional and Community.

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

This repository contains all the XSS cheatsheet data to allow contributions from the community.

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

Probe a rendering engine for vulnerabilities and other features

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

Burp Extensions Api

Examples for using the Montoya API with Burp Suite

This repo contains all the injections mentioned in my talk and enumerators.

HTTP Desync research factory.

A Burp Suite extension that checks for the HTTPoxy vulnerability.

Evenly distributes scanner load across targets

Burp extension to help developers replicate findings from pen tests

This is the data that powers the PortSwigger URL validation bypass cheat sheet.

Burp Wiener API (Legacy)

Sourced from gist: https://gist.github.com/mwielgoszewski/7026954