A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It supports dynamic payload generation, including BCheck syntax, and can automatically generate Bambdas scripts. Additionally, it offers "Copy as JavaScript" to convert HTTP requests for enhanced XSS testing.

Burp style tool for free, runs on vps

gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)

Python scripts demonstrating a host header validation bypass via TLS connection state reuse.

Burp Suite Custom Repeater Action Script For Quick Fuzzing

A curated repository of web application penetration testing notes, labs, and walkthroughs from PortSwigger Academy and real-world exercises. Ideal for anyone learning bug bounty hunting, web app security, and practical pentesting techniques.

Burp Suite extension for thick-client proxying and PAC workflows

Enhanced BurpGPT 是一个强大的 Burp Suite 插件。通过分析指定的 HTTP 请求和响应，帮助安全测试人员更快速地发现潜在的安全漏洞。

HTB Retired Machines writeups (tools and commands explanation)

This repo contains the solutions for the PortSwigger WebSecurity Academy Labs

Open Source Vulnerability Management Platform

Burp Suite extension that automatically extracts and decodes values from HTTP responses into the Intruder Comment field.

Burp Suite extension to import OpenAPI specs and generate requests for Repeater.

BurpSuite AI-Powered Request Analyzer

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty

A simple setup for learning and practicing security testing at home. It includes building a small lab environment, running tests on different systems, and exploring how attacks and defenses work in a safe, controlled way. The goal is hands-on learning, not real-world exploitation.

Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules

Burpsuite extension writed in Python that looking for PII data (CPF) in passive requests, validate CPF and create issue.

Formatify is a Burp Suite extension that instantly converts HTTP requests into multiple formats like cURL, Python, PowerShell, and more—saving time and streamlining your workflow. 🚀

A proxy helper