Submit Burp Suite extensions and updates to the BApp Store.
☆17Jul 15, 2026Updated this week
Alternatives and similar repositories for extension-portal
Users that are interested in extension-portal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- By manipulating LSASS memory flags like UseLogonCredential and IsCredGuardEnabled, this repo demonstrates how Credential Guard can be byp…☆15May 25, 2025Updated last year
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- Burpsuite plugin for Interact.sh☆15Updated this week
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆16Mar 10, 2025Updated last year
- ☆27Aug 19, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- The Java Burp Extension version of my BypassFuzzer tool☆36Jun 26, 2026Updated 3 weeks ago
- GoWC - Wildcard cleaner for MassDNS☆23Jun 10, 2022Updated 4 years ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆33May 28, 2026Updated last month
- 一个功能完整的网络安全攻防演练平台，采用红黑色调主题设计，支持实时态势感知、队伍管理、靶标部署、成绩统计等完整功能。"蓝的世界于凌晨两点沉入梦境，红的天地在此刻悄然迎来黎明。"☆17Nov 14, 2025Updated 8 months ago
- MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a sca…☆20Jul 3, 2026Updated 2 weeks ago
- Low Noise Semgrep Security Rules☆22Feb 6, 2025Updated last year
- 一款支持检测web应用程序未授权访问缺陷的burp suite插件，可自定义配置检测字段以及返回包json数据分析☆13Apr 22, 2024Updated 2 years ago
- ☆17Apr 9, 2026Updated 3 months ago
- Search for github leaks by combining gitleaks and git-hound capabilities with rate control and exhaustive search.☆24Jun 20, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A centralized Python botnet that currently supports HTTP, TCP and UDP flood attacks.☆13Jul 6, 2025Updated last year
- My collection of Semgrep rules for vulnerability detection on source code (swift, java, cobol)☆44Dec 3, 2025Updated 7 months ago
- List of Command&Control (C2) software☆53Nov 11, 2022Updated 3 years ago
- Learn how to intercept flutter apps☆25Jan 19, 2024Updated 2 years ago
- Burp Suite Extension to monitor new scope☆16Mar 31, 2021Updated 5 years ago
- SpecOps is a Burp Suite extension that ingests an OpenAPI or Swagger spec and instantly builds a workbench to test every documented endpo…☆32Jul 10, 2026Updated last week
- surface-watch monitors the authorized external attack surface of an organization over time☆56May 11, 2026Updated 2 months ago
- Browser-based iOS IPA security analyzer.☆80May 30, 2026Updated last month
- This is an Active Directory Pentesting Lab created by me which includes attacks like IPV6 DNS takeover, Smb relay, unconstrained delegati…☆24Jan 23, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Oct 4, 2021Updated 4 years ago
- ☆10Dec 19, 2024Updated last year
- ☆18Dec 20, 2025Updated 7 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 3 months ago
- Analyze Android native `.so` files☆125Jul 28, 2025Updated 11 months ago
- Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 iss…☆83Jun 11, 2025Updated last year
- SALSA 💃⚡ - SALesforce Scanner for Aura (and beyond). Enumeration of vulnerabilities and misconfigurations against Salesforce endpoint.☆31Jan 26, 2025Updated last year
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated last week
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Black-box web penetration testing automation framework for AI Agents☆21Jun 28, 2026Updated 3 weeks ago
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 4 months ago
- Burp Suite MCP Assistant in IDE Extension☆15Dec 31, 2025Updated 6 months ago
- Small script for retrieving incoming transactions based on provided hour period.☆14Jan 24, 2022Updated 4 years ago
- A natural evolution of a evolution of Burp Suite's Repeater tool☆15Jun 29, 2026Updated 3 weeks ago
- A powerful command-line interface for interacting with the [RapidDNS API](https://rapiddns.io/help/api). This tool allows you to perform …☆35Feb 22, 2026Updated 4 months ago
- Burp Suite Extension with MCP Server to enhance manual application security testing☆52Jan 21, 2026Updated 5 months ago