portswigger Goto Github PK

3d-css-tutorial

403-bypasser

5gc-api-parse

A BurpSuite extension to parse 5GC NF OpenAPI 3.0 files to assess 5G core networks

acmate

ACMate - a tool for Reverse-engineering and Testing of Access Control Policies of Web Applications

activation-script

Activate Burp from a script

active-scan-plus-plus

ActiveScan++ Burp Suite Plugin

add-custom-header

A Burp Suite extension to add a custom header (e.g. JWT)

add-to-sitemap-plus

add-to-tls-pass-through

Burp Extension to add context menus for configuration of the Add to TLS Pass Through setting

add-track-custom-issues

additional-cors-checks

additional-csrf-checks

additional-scanner-checks

Collection of scanner checks missing in Burp

adhoc-payload-processors

Generate payload processors on the fly - without having to create individual extensions.

admin-panel-finder

A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)

aes-killer

Burp Plugin to decrypt AES encrypted traffic on the fly

aes-payloads

Burp Extension to manipulate AES encrypted payloads

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation.

amf-deserializer

A Burp Extender plugin, that will take deserialized AMF objects and encode them in XML using the Xtream library

anonymous-cloud

Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities

anti-csrf-token-from-referer

assertj-swing

Fluent assertions for Swing apps

asset-discovery

Burp Suite extension to discover assets from HTTP response.

ator

attack-selector

Burp Suite Attack Selector Plugin

attack-surface-detector

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

auth-analyzer

auth-matrix

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.

authz

auto-gql

A plugin for Burp Suite Pro that uses the GraphQL schema to begin Active Scanning the entire endpoint.