Repositories list

• extension-portal

  Public
  Submit Burp Suite extensions and updates to the BApp Store.

  0•7•62•0•Updated Jan 30, 2026Jan 30, 2026

• enterprise-helm-charts

  Public

  PortSwigger/enterprise-helm-charts’s past year of commit activity
  Helm charts for Burp Suite DAST Kubernetes installation.

  kubernetesenterpriseburp+ 2dasthelm-chart

  Go Template

  •

  Apache License 2.0

  •9•5•3•4•Updated Jan 30, 2026Jan 30, 2026

• burp-suite-enterprise-edition-ami

  Public

  PortSwigger/burp-suite-enterprise-edition-ami’s past year of commit activity
  MIT License

  •1•6•0•0•Updated Jan 29, 2026Jan 29, 2026

• grpc-web-coder

  Public

  PortSwigger/grpc-web-coder’s past year of commit activity
  Encode/Decode gRPC-Web payloads automatically. Copied from nxenon/grpc-pentest-suite

  extension

  Python

  •

  GNU General Public License v3.0

  •1•1•0•0•Updated Jan 27, 2026Jan 27, 2026

• xss-cheatsheet-data

  Public

  PortSwigger/xss-cheatsheet-data’s past year of commit activity
  This repository contains all the XSS cheatsheet data to allow contributions from the community.

  Other

  •87•452•0•0•Updated Jan 27, 2026Jan 27, 2026

• BChecks

  Public

  PortSwigger/BChecks’s past year of commit activity
  BChecks collection for Burp Suite Professional and Burp Suite DAST

  GNU Lesser General Public License v3.0

  •134•763•31•1•Updated Jan 26, 2026Jan 26, 2026

• autorize

  Public
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people …

  extension

  Python

  •244•269•0•1•Updated Jan 23, 2026Jan 23, 2026

• bubble-pop

  Public

  PortSwigger/bubble-pop’s past year of commit activity
  BurpSuite Extension for encrypting & decrypting bubble.io elasticsearch queries

  extension

  Python

  •1•0•0•0•Updated Jan 22, 2026Jan 22, 2026

• auraditor

  Public
  A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive audit capabilities.

  extension

  Java

  •

  Other

  •8•0•0•0•Updated Jan 22, 2026Jan 22, 2026

• param-miner

  Public
  extension

  Java

  •

  Other

  •179•1.4k•19•5•Updated Jan 22, 2026Jan 22, 2026

• saml-raider

  Public
  SAML2 Burp Extension

  extension

  Java

  •

  MIT License

  •80•33•0•1•Updated Jan 22, 2026Jan 22, 2026

• hackvertor

  Public
  extension

  Java

  •60•99•0•0•Updated Jan 21, 2026Jan 21, 2026

• http-request-smuggler

  Public

  PortSwigger/http-request-smuggler’s past year of commit activity
  extension

  Java

  •

  Other

  •126•1.2k•11•2•Updated Jan 21, 2026Jan 21, 2026

• kerberos-authentication

  Public
  Burp Suite extension to perform Kerberos authentication

  extension

  Java

  •

  GNU Affero General Public License v3.0

  •18•12•0•0•Updated Jan 19, 2026Jan 19, 2026

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  Java

  •

  GNU Lesser General Public License v3.0

  •82•486•1•3•Updated Jan 19, 2026Jan 19, 2026

• response-overview

  Public
  Response Overview Extension for BurpSuite

  extension

  Kotlin

  •6•5•0•0•Updated Jan 19, 2026Jan 19, 2026

• highlighter-and-extractor

  Public
  HaE - BurpSuite Highlighter and Extractor

  extension

  Java

  •294•32•0•0•Updated Jan 19, 2026Jan 19, 2026

• dpop-authenticator

  Public
  Burp Extension DPoP

  extension

  Java

  •2•0•0•0•Updated Jan 16, 2026Jan 16, 2026

• inql

  Public
  InQL - A Burp Extension for GraphQL Security Testing

  extension

  Kotlin

  •

  Apache License 2.0

  •177•49•0•0•Updated Jan 15, 2026Jan 15, 2026

• api-workflow-manager

  Public
  API & Workflow Manager is a Burp Suite extension that provides centralized management and organization for API endpoints during security testing. It allows secu…

  extension

  Python

  •

  MIT License

  •1•0•0•0•Updated Jan 15, 2026Jan 15, 2026

• trusted-domain-cors-scanner

  Public
  My own additional active scan checks.

  extension

  Kotlin

  •1•0•0•0•Updated Jan 15, 2026Jan 15, 2026

• piper

  Public

  PortSwigger/piper’s past year of commit activity
  Piper Burp Suite Extender plugin

  extension

  Kotlin

  •

  GNU General Public License v3.0

  •15•16•0•0•Updated Jan 15, 2026Jan 15, 2026

• report-lm

  Public
  extension

  Java

  •

  GNU General Public License v3.0

  •2•0•0•0•Updated Jan 14, 2026Jan 14, 2026

• certsquirt

  Public
  A golang PKI in less than 1000 lines of code.

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •3•8•0•0•Updated Jan 13, 2026Jan 13, 2026

• api-sword

  Public
  NSFOCUS API_Sword：A Burp Suite extension, Automatically recursively collect API endpoints from any response

  extension

  Java

  •14•0•0•0•Updated Jan 13, 2026Jan 13, 2026

• pyburp

  Public
  BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the Burp Suite proxy using …

  extension

  Java

  •12•15•0•0•Updated Jan 12, 2026Jan 12, 2026

• pycript

  Public
  Burp Suite extension for bypassing client-side encryption using custom logic for manual and automation testing.

  extension

  Java

  •

  MIT License

  •35•11•0•0•Updated Jan 12, 2026Jan 12, 2026

• proxy-rotate

  Public
  extension

  Java

  •

  Apache License 2.0

  •2•0•0•0•Updated Jan 9, 2026Jan 9, 2026

• dns-exfilnspector

  Public
  Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator

  extension

  Python

  •

  GNU General Public License v3.0

  •4•2•0•0•Updated Jan 7, 2026Jan 7, 2026

• get-all-parameters

  Public

  PortSwigger/get-all-parameters’s past year of commit activity
  Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

  extension

  Python

  •157•27•0•0•Updated Jan 6, 2026Jan 6, 2026