Burp Molly Pack - Security checks pack for Burp Suite.Collaborator Everywhere - A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator.Backslash Powered Scanner - Finds unknown classes of injection vulnerabilities.Burp Sentinel - GUI Burp Plugin to ease discovering of security holes in web applications.CSP Bypass - A Burp Plugin for Detecting Weaknesses in Content Security Policies.Java Deserialization Scanner - All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities.The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications. J2EEScan - J2EEScan is a plugin for Burp Suite Proxy.Software Version Reporter - Burp extension to passively scan for applications revealing software version numbers.HTML5 Auditor - This extension checks for usage of HTML5 features that have potential security risks.CSRF Scanner - CSRF Scanner Extension for Burp Suite Pro.Additional Scanner checks - Collection of scanner checks missing in Burp.Burp Vulners Scanner - Vulnerability scanner based on search API.ActiveScan++ - ActiveScan++ extends Burp Suite's active and passive scanning capabilities.Simply press command + F to search for a keyword.How to UseĪwesome burp extensions is an amazing list for people who want to spice up their Burp instance with awesome plugins.

Please refer to the contributing guide for details. A curated list of amazingly awesome Burp Extensions Contributing

Burp suite pro github