burp-plugin topic

Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).

aress31

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

simioni87

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

Keramas

Burp Suite extension to passively scan for applications revealing server error messages

augustd

A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration

gnothiseautonlw

burpsuite extension for check and extract sensitive request parameter

theLSA

burpsuite extension for extract information from data

theLSA

Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common misconfigurations and security holes.

thomashartm

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities

BitTheByte

A more useful CSRF PoC generator on Burp Suite

tkmru