
The official repository of @Burp_Suite extensions.
Joined June 2017
- Tweets1.2K
- Following1
- Followers11.1K
- Likes0
To keep up-to-date:
👉 Follow @Burp_Suite
👉 Join the PortSwigger Discord: discord.com/invite/portswigg…
We’re winding down activity on this account 👋
BApp updates and releases will be shared as a monthly roundup on @Burp_Suite from February.
For more discussions, tips, and community chatter, come hang out with us on @Discord.
Thanks for following, speak soon!
🚀 For live updates and monthly roundups, join the PortSwigger Discord server!
discord.gg/portswigger
🎉 New: Proxy Rotate
Routes each HTTP request from Burp through a random proxy from a list.
Check it out on the BApp Store 👇
portswigger.net/bappstore/e5…
💫 Trusted Domain CORS Scanner v1.1.0
Use new service for external subdomain lookup.
Provides additional scan checks for CORS vulnerabilities.
portswigger.net/bappstore/c2…
💫 Piper v0.8
Bug fix for newer versions of Burp.
Integrate external command-line tools by piping HTTP requests and responses through external programs, enabling Unix-style tool composition.
portswigger.net/bappstore/e4…
💫 PwnFox For Chromium v1.3.2
Various bug fixes.
Allows you to use Chromium with PwnFox.
portswigger.net/bappstore/23…
💫 Param Miner v1.56
Provide actions through the command palette.
This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities.
portswigger.net/bappstore/17…
💫 GAP (Get All Parameters, Links, and Words) v6.2.0
Various fixes and improvements.
Find potential endpoints, parameters, and generate a custom target wordlist.
portswigger.net/bappstore/81…
💫 ReportLM v1.0.1
Small bug fix.
Use BurpAI to generate custom reports from Burp's issues.
portswigger.net/bappstore/c2…
💫 Updated: InQL - GraphQL Scanner v6.1.1
Small bug fix.
Analyzes GraphQL schemas, detects vulnerabilities, and integrates with Burp Suite for testing and query generation.
portswigger.net/bappstore/29…
💫 Updated: DNS Exfilnspector v1.3.0
Various fixes and improvements.
Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator.
portswigger.net/bappstore/0e…
🌐 For live updates and monthly roundups, join the PortSwigger Discord server!
discord.gg/portswigger
🎉 New: Window Title Controller
Customize your Burp Suite window title.
portswigger.net/bappstore/96…
💫 Updated: PwnFox For Chromium
v1.3.0, v1.3.1
Adds ability to rename profiles, as well as various other improvements.
Allows you to use Chromium with PwnFox.
portswigger.net/bappstore/23…
🎉 New: Session Keeper
Keeps sessions alive by automatically resending low-impact requests at set intervals, with tab-based multi-session management.
portswigger.net/bappstore/3c…
💫 Updated: Hackvertor v2.3.34
More tag automator examples, and bug fixes.
Converts data using a tag-based configuration to apply various encoding and escaping operations.
portswigger.net/bappstore/65…
🎉 New: MITM Decryption
Simplify the testing of encrypted traffic by automatically decrypting it to plaintext, allowing for efficient penetration testing and vulnerability discovery.
portswigger.net/bappstore/ff…
💫 Updated: Active Scan++ v2.0.9
This includes an improvement to false positive detection.
Extends Burp's active and passive scanning capabilities.
portswigger.net/bappstore/31…