Repositories list

• mcp-server

  Public
  MCP Server for Burp

  extension

  extension

  Kotlin

  •

  GNU General Public License v3.0

  •161161 forks•944944 stars•3434 issues•2323 pull requests•Updated Jun 26, 2026Jun 26, 2026

• nats-aws-auth

  Public
  Go

  •

  MIT License

  •11 fork•00 stars•11 issue•11 pull request•Updated Jun 26, 2026Jun 26, 2026

• idcat

  Public
  The github app identity service

  Rust

  •

  MIT License

  •11 fork•11 star•33 issues•33 pull requests•Updated Jun 25, 2026Jun 25, 2026

• mcp-server-scanner

  Public
  extension

  extension

  Java

  •

  Apache License 2.0

  •11 fork•00 stars•00 issues•00 pull requests•Updated Jun 25, 2026Jun 25, 2026

• qualys-was

  Public
  Qualys' Burp Extension for WAS

  extension

  extension

  Java

  •44 forks•44 stars•00 issues•00 pull requests•Updated Jun 22, 2026Jun 22, 2026

• stepper

  Public
  A natural evolution of a evolution of Burp Suite's Repeater tool

  Java

  •

  GNU Affero General Public License v3.0

  •22 forks•00 stars•00 issues•00 pull requests•Updated Jun 18, 2026Jun 18, 2026

• spec-ops

  Public
  SpecOps is a Burp Suite extension that ingests an OpenAPI or Swagger spec and instantly builds a workbench to test every documented endpoint.

  extension

  extension

  Java

  •

  Apache License 2.0

  •88 forks•00 stars•00 issues•00 pull requests•Updated Jun 18, 2026Jun 18, 2026

• stepper-old

  Public archive
  A natural evolution of Burp Suite's Repeater tool

  extension

  extension

  Java

  •

  GNU Affero General Public License v3.0

  •4040 forks•9595 stars•00 issues•11 pull request•Updated Jun 18, 2026Jun 18, 2026

• extension-portal

  Public
  Submit Burp Suite extensions and updates to the BApp Store.

  extensibility

  extensibility

  22 forks•1717 stars•103103 issues•22 pull requests•Updated Jun 17, 2026Jun 17, 2026

• BChecks

  Public
  BChecks collection for Burp Suite Professional and Burp Suite DAST

  extensibility

  extensibility

  GNU Lesser General Public License v3.0

  •133133 forks•783783 stars•3131 issues•11 pull request•Updated Jun 17, 2026Jun 17, 2026

• enterprise-helm-charts

  Public
  Helm charts for Burp Suite DAST Kubernetes installation.

  kubernetesenterpriseburp+ 2

  kubernetesenterpriseburpdasthelm-chart

  Go Template

  •

  Apache License 2.0

  •1010 forks•66 stars•33 issues•44 pull requests•Updated Jun 16, 2026Jun 16, 2026

• bambdas

  Public
  Bambdas collection for Burp Suite Professional and Community.

  extensibility

  extensibility

  Java

  •

  GNU Lesser General Public License v3.0

  •8686 forks•524524 stars•11 issue•00 pull requests•Updated Jun 16, 2026Jun 16, 2026

• param-miner

  Public
  extension

  extension

  Java

  •

  Other

  •184184 forks•1.4k1.4k stars•1919 issues•55 pull requests•Updated Jun 15, 2026Jun 15, 2026

• request-redactor-x

  Public
  RequestRedactorX automates safe request sharing by removing, censoring, or masking sensitive data in HTTP requests. Supports four copy modes, customizable heade…

  extension

  extension

  Python

  •11 fork•00 stars•00 issues•00 pull requests•Updated Jun 11, 2026Jun 11, 2026

• hackvertor

  Public
  extension

  extension

  Java

  •6767 forks•100100 stars•00 issues•00 pull requests•Updated Jun 3, 2026Jun 3, 2026

• burp-extensions-montoya-api-examples

  Public
  Examples for using the Montoya API with Burp Suite

  exampleextensibility

  exampleextensibility

  Java

  •

  Other

  •2121 forks•187187 stars•44 issues•22 pull requests•Updated Jun 2, 2026Jun 2, 2026

• extension-template-project

  Public template
  Contains a ready-to-use extension template to help you start writing your extension immediately.

  extensibility

  extensibility

  Java

  •22 forks•66 stars•00 issues•22 pull requests•Updated Jun 2, 2026Jun 2, 2026

• burpcord

  Public
  A BurpSuite extension for discord rich presence

  extension

  extension

  Java

  •

  MIT License

  •11 fork•11 star•00 issues•00 pull requests•Updated May 22, 2026May 22, 2026

• asset-saver

  Public
  Burp Suite extension for saving previously loaded assets

  extension

  extension

  Java

  •

  MIT License

  •11 fork•11 star•00 issues•00 pull requests•Updated May 22, 2026May 22, 2026

• byte-banter

  Public
  ByteBanter is a Burp Suite extension that leverages BurpAI to generate intelligent and context-aware payloads for Burp Intruder. By integrating BurpAI capabilit…

  extension

  extension

  Java

  •11 fork•11 star•00 issues•00 pull requests•Updated May 20, 2026May 20, 2026

• intigriti-quick-scope

  Public
  Intigriti Quick Scope (IQS) is a new Burp Suite extension that allows researchers to automate project and scope setup within Burp Suite by pulling data directly…

  extension

  extension

  Java

  •

  MIT License

  •11 fork•00 stars•00 issues•00 pull requests•Updated May 12, 2026May 12, 2026

• enterprise-reference-stack-for-aws

  Public
  Go Template

  •

  Apache License 2.0

  •88 forks•1212 stars•00 issues•00 pull requests•Updated May 11, 2026May 11, 2026

• xss-cheatsheet-data

  Public
  This repository contains all the XSS cheatsheet data to allow contributions from the community.

  Other

  •9191 forks•457457 stars•00 issues•00 pull requests•Updated May 11, 2026May 11, 2026

• ci-driven-scan-github-action

  Public
  A github action that allows you to run a vulnerability scan.

  Dockerfile

  •

  MIT License

  •66 forks•1616 stars•11 issue•00 pull requests•Updated May 6, 2026May 6, 2026

• http-request-smuggler

  Public
  extension

  extension

  Java

  •

  Other

  •126126 forks•1.2k1.2k stars•1111 issues•22 pull requests•Updated Apr 28, 2026Apr 28, 2026

• pyburp

  Public
  BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the Burp Suite proxy using …

  extension

  extension

  Java

  •1212 forks•2222 stars•00 issues•00 pull requests•Updated Apr 27, 2026Apr 27, 2026

• redsys-psd2-request-signer

  Public
  Extensión de Burp Suite para gestionar automáticamente la firma de peticiones a la API de PSD2 / Redsys

  extension

  extension

  Python

  •11 fork•00 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• host-header-inchecktion

  Public
  A burp extention to find host header injection vulnerabilities

  extension

  extension

  Java

  •44 forks•66 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• firewall-ferret

  Public
  This java project was created with Portswigger's Montoya API to be a Burp Extension. It's well known that WAFs only scan up to a certain amount of data per requ…

  extension

  extension

  Java

  •22 forks•22 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• jwt-editor

  Public
  A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automa…

  extension

  extension

  Java

  •

  Apache License 2.0

  •1717 forks•4747 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026