Java Deserialization Scanner - All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities.

The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

J2EEScan - J2EEScan is a plugin for Burp Suite Proxy.

Software Version Reporter - Burp extension to passively scan for applications revealing software version numbers.

HTML5 Auditor - This extension checks for usage of HTML5 features that have potential security risks.

CSRF Scanner - CSRF Scanner Extension for Burp Suite Pro.

Additional Scanner checks - Collection of scanner checks missing in Burp.

Burp Vulners Scanner - Vulnerability scanner based on search API.

Active Scan++ - ActiveScan++ extends Burp Suite's active and passive scanning capabilities.

Simply press command + F to search for a keyword.

How to UseĪwesome burp extensions is an amazing list for people who want to spice up their Burp instance with awesome plugins.

Please refer to the contributing guide for details.

Burp is also highly configurable, and it has a large number of broad scope features to help the most experienced web security testers with their job.įeatures such as the burpcollaborator will allow you to identify vulnerabilities much faster when the audited web application is processing some manually sent requests or while using the web scanner module.A curated list of amazingly awesome Burp Extensions Contributing Main Burp Suite professional featuresīurp Suite comprises the following main components:īurp is easy-to-use and interactive, allowing for a large number of users to start working right away. Its many tools work seamlessly together to support the whole set of processes, including testing, mapping, and attack surface analysis of an initial request, by searching and exploiting security vulnerabilities.īurp gives you full control, allowing you to combine advanced manual techniques with technique status automation for a faster, more efficient and fun job.

Burp Suite is an integrated platform for web application security testing.

Burp suite professional