bappstore

BurpSuitePro拓展

被动扫描

• (shiro)https://github.com/pmiaowu/BurpShiroPassiveScan
• (SpringSpiderScan)https://github.com/EASY233/BpScan
• (Sprin CVE-2022-22947)https://github.com/zhizhuoshuma/Burp_VulPscan
• (log4jScan)https://github.com/pmiaowu/log4j2Scan
• (FastJsonScan)https://github.com/pmiaowu/BurpFastJsonScan
• (log4j2)https://github.com/f0ng/log4j2burpscanner
• https://github.com/harry1080/Struts2Burp
• https://github.com/metaStor/SpringScan
• https://github.com/Daybr4ak/ShiroScan
• https://github.com/zrquan/burp-weblogic-scanner
• https://github.com/bigsizeme/shiro-check
• https://github.com/harry1080/Struts2Burp
• https://github.com/j5s/Log4j2Scan-1
• https://github.com/a1phaboy/JsonDetect
• https://github.com/DXC-StrikeForce/Burp-Log4j-HammerTime
• (Spring)https://github.com/onurgule/S4S-Scanner
• https://github.com/silentsignal/burp-text4shell
• https://github.com/federicodotta/Java-Deserialization-Scanner
• (主机标头注入漏洞)https://github.com/fabianbinna/host_header_inchecktion
• (秘钥识别)https://github.com/jinqi520/MessageFinder

验证码识别

• https://github.com/f0ng/captcha-killer-modified
• https://github.com/smxiazi/NEW_xp_CAPTCHA
• https://github.com/smxiazi/xp_CAPTCHA
• https://github.com/AbelChe/BlastWithCaptcha
• https://github.com/Releasel0ck/reCAPTCHA
• https://github.com/bit4woo/reCAPTCHA
• (谷歌验证码)https://github.com/anthrax3/burp-reCAPTCHA

加密解密

• (JsEncrypter)https://github.com/TheKingOfDuck/burpJsEncrypter
• (AES/RSA/DES)https://github.com/whwlsfb/BurpCrypto
• https://github.com/c0ny1/jsEncrypter
• https://github.com/f0ng/autoDecoder
• https://github.com/G-Security-Team/JS-Forward

• https://github.com/CTF-MissFeng/jsForward

• https://github.com/GoSecure/burp-ntlm-challenge-decoder

自定义修改

• (XFF伪造ip)https://github.com/TheKingOfDuck/burpFakeIP
• https://github.com/moyuwa/Burpsuite-XFFHelper-2.0
• (随意改进您的有效载荷)https://github.com/synacktiv/HopLa
• https://github.com/0nise/burp-fofa

2FA

• (谷歌otp)https://github.com/aress31/google-authenticator

非HTTP协议抓包

• https://github.com/summitt/Burp-Non-HTTP-Extension

团队协作共享

• https://github.com/Static-Flow/BurpSuite-Team-Extension

扩展开发生成器

• https://github.com/rsrdesarrollo/generator-burp-extension

获取参数链接

• https://github.com/xnl-h4ck3r/GAP-Burp-Extension
• https://github.com/QdghJ/burp_data_collector
• https://github.com/luke-goddard/LFI-Fuzzer-Burp-Suite
• https://github.com/moeinfatehi/Admin-Panel_Finder
• (Unicode 转中文)https://github.com/bit4woo/u2c
• https://github.com/JackyTsuuuy/UnicodeDecoder4burp
• https://github.com/xunyang1/BurpUnicodeTransfer
• https://github.com/twilightsuz326/BurpSuite-utf8Decoder
• https://github.com/gh0stkey/HaE

• https://github.com/pajswigger/update-all-params
• https://github.com/Regala/burp-subdomains

安卓抓包

• https://github.com/oemunlock/burp_der_cert_to_android_cert

• https://github.com/pdelorenzo/MobileMiTM

• https://github.com/qxqzx3489/magisk_install_burpCA

• https://github.com/mathias82/installAndroidApk-startFridaServer-runBurpSuite
• https://blog.ropnop.com/configuring-burp-suite-with-android-nougat/
• https://github.com/sundarlal12/burp_cert_genemotion
• https://github.com/az0mb13/frida_setup

其他工具库

• https://github.com/snoopysecurity/awesome-burp-extensions

插件使用描述

• https://github.com/lilifengcode/Burpsuite-Plugins-Usage