Repositories list

• enterprise-helm-charts

  Public

  PortSwigger/enterprise-helm-charts’s past year of commit activity
  Helm charts for Burp Suite DAST Kubernetes installation.

  kubernetesenterpriseburp+ 2dasthelm-chart

  Smarty

  •

  Apache License 2.0

  •9•5•3•3•Updated Dec 19, 2025Dec 19, 2025

• dns-exfilnspector

  Public
  Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator

  extension

  Python

  •

  GNU General Public License v3.0

  •3•2•0•1•Updated Dec 19, 2025Dec 19, 2025

• graphql-security-tester

  Public

  PortSwigger/graphql-security-tester’s past year of commit activity
  A comprehensive Burp Suite extension that leverages Burp's native Montoya AI to generate sophisticated malicious GraphQL test queries for authorized security testing. Features dynamic AI status monitoring, schema introspection, RAG integration, and intelligent query formatting.

  extension

  Java

  •1•0•0•0•Updated Dec 19, 2025Dec 19, 2025

• pentest-tools-integration

  Public

  PortSwigger/pentest-tools-integration’s past year of commit activity
  Easily push Burp findings into your Pentest-Tools.com workspace.

  extension

  Java

  •1•0•0•0•Updated Dec 18, 2025Dec 18, 2025

• extension-portal

  Public

  PortSwigger/extension-portal’s past year of commit activity
  Submit Burp Suite extensions and updates to the BApp Store.

  0•5•65•0•Updated Dec 18, 2025Dec 18, 2025

• window-title-controller

  Public

  PortSwigger/window-title-controller’s past year of commit activity
  Toggle the license suffix, set a custom window title, and restore the original Burp title with ease.

  extension

  Java

  •1•0•0•0•Updated Dec 18, 2025Dec 18, 2025

• mitm-decryption

  Public

  PortSwigger/mitm-decryption’s past year of commit activity
  一个想让你测试加密流量像测试明文一样简单高效的 Burp 插件。 A Burp plugin that makes testing encrypted traffic as simple and efficient as testing plaintext.

  extension

  Java

  •

  Apache License 2.0

  •71•2•0•0•Updated Dec 18, 2025Dec 18, 2025

• api-sword

  Public
  NSFOCUS API_Sword：A Burp Suite extension, Automatically recursively collect API endpoints from any response

  extension

  Java

  •14•0•0•0•Updated Dec 18, 2025Dec 18, 2025

• pwnfox-for-chromium

  Public

  PortSwigger/pwnfox-for-chromium’s past year of commit activity
  A BurpSuite extension that allows you to use Chromium with PwnFox

  extension

  Java

  •

  MIT License

  •6•5•0•1•Updated Dec 18, 2025Dec 18, 2025

• hackvertor

  Public

  PortSwigger/hackvertor’s past year of commit activity
  extension

  Java

  •58•100•0•0•Updated Dec 17, 2025Dec 17, 2025

• burp-suite-enterprise-edition-ami

  Public
  MIT License

  •1•6•0•0•Updated Dec 16, 2025Dec 16, 2025

• bambdas

  Public

  PortSwigger/bambdas’s past year of commit activity
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •76•464•1•2•Updated Dec 16, 2025Dec 16, 2025

• active-scan-plus-plus

  Public
  ActiveScan++ Burp Suite Plugin

  extension

  Java

  •

  Apache License 2.0

  •202•239•0•0•Updated Dec 16, 2025Dec 16, 2025

• session-keeper

  Public
  Easily maintain your current session in Burp

  extension

  Python

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Dec 16, 2025Dec 16, 2025

• http-batch-tool

  Public
  BurpFire (HTTP Batch Tool) is a Burp Suite extension designed to facilitate fast and bulk HTTP requests from a user-provided list of URLs. Ideal for pentesting, reconnaissance, and endpoint validation.

  extension

  Python

  •

  MIT License

  •1•2•0•0•Updated Dec 15, 2025Dec 15, 2025

• saml-raider

  Public
  SAML2 Burp Extension

  extension

  Java

  •

  MIT License

  •80•33•0•0•Updated Dec 15, 2025Dec 15, 2025

• turbo-intruder

  Public

  PortSwigger/turbo-intruder’s past year of commit activity
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

  extension

  Kotlin

  •

  Apache License 2.0

  •228•1.7k•16•2•Updated Dec 15, 2025Dec 15, 2025

• exporter-plus-plus

  Public
  This Burp Suite extension allows the user to upload the identified security issues directly to Pwndoc or export them in various document formats.

  extension

  Java

  •1•1•0•0•Updated Dec 11, 2025Dec 11, 2025

• autovader

  Public
  An extension to automate using DOM Invader from within Burp

  extension

  Java

  •4•7•0•0•Updated Dec 11, 2025Dec 11, 2025

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •3•8•0•1•Updated Dec 10, 2025Dec 10, 2025

• xss-cheatsheet-data

  Public
  This repository contains all the XSS cheatsheet data to allow contributions from the community.

  Other

  •87•448•0•0•Updated Dec 10, 2025Dec 10, 2025

• burp-extensions-montoya-api

  Public
  Burp Extensions Api

  Java

  •

  Other

  •11•189•28•0•Updated Dec 9, 2025Dec 9, 2025

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  extension

  Java

  •

  MIT License

  •33•12•0•0•Updated Dec 9, 2025Dec 9, 2025

• beanstack-stacktrace-fingerprinter

  Public
  X41 BeanStack - Stack Trace Fingerprinting BETA

  extension

  Java

  •

  Apache License 2.0

  •6•6•0•0•Updated Dec 5, 2025Dec 5, 2025

• splitting-the-email-atom

  Public
  HTML

  •8•91•0•0•Updated Dec 4, 2025Dec 4, 2025

• ci-cd-platform-scanning-examples

  Public
  MIT License

  •5•4•0•1•Updated Dec 4, 2025Dec 4, 2025

• magic-variables

  Public
  🪄 Magic variables is a Burp extension that provides helpful replacements in traffic such as random integers, random UUIDs and random strings.

  extension

  Java

  •

  MIT License

  •1•0•0•0•Updated Dec 2, 2025Dec 2, 2025

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  Java

  •

  Other

  •20•170•3•1•Updated Dec 1, 2025Dec 1, 2025

• inql

  Public

  PortSwigger/inql’s past year of commit activity
  InQL - A Burp Extension for GraphQL Security Testing

  extension

  Kotlin

  •

  Apache License 2.0

  •177•47•0•1•Updated Dec 1, 2025Dec 1, 2025

• response-overview

  Public

  PortSwigger/response-overview’s past year of commit activity
  Response Overview Extension for BurpSuite

  extension

  Kotlin

  •5•5•0•0•Updated Dec 1, 2025Dec 1, 2025