Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and automated reconnaissance. Supports REST/GraphQL/SOAP APIs with Nuclei, Turbo Intruder, and external tool integration. OWASP API Top 10 coverage.
☆374Aug 15, 2026Updated 2 months ago
Alternatives and similar repositories for BurpAPISecuritySuite
Users that are interested in BurpAPISecuritySuite are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆1,006Updated this week
- Portable passive hostname reconnaissance through Shodan CTL☆42Updated this week
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆461Updated this week
- A curated collection of offensive, defensive and AI/LLM security tools.☆185Oct 29, 2026Updated last week
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆465Oct 3, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Structured practice: Mainly PortSwigger lab writeups☆23Updated this week
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool☆1,577Feb 2, 2026Updated 9 months ago
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,568Oct 21, 2026Updated 2 weeks ago
- A web security workbench built for AI agents.☆388Updated this week
- An intentionally vulnerable OWASP LLM Top 10 training platform for AI Security, Prompt Injection, RAG Security, Agent Security, and GenAI…☆351Oct 20, 2026Updated 2 weeks ago
- HackAgent is an open-source security toolkit to detect vulnerabilities of your AI Agents☆535Updated this week
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆461Oct 7, 2026Updated 3 weeks ago
- PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous…☆929Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆491Oct 14, 2026Updated 3 weeks ago
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆98Sep 10, 2026Updated last month
- Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and …☆537Oct 24, 2026Updated last week
- All my walkthroughs for HTB Academy labs in the Active Directory Module ( CPTS path ). Includes folder of canvas files for Obsidian.☆70Apr 27, 2026Updated 6 months ago
- ☆50Aug 17, 2026Updated 2 months ago
- AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox a…☆1,085Oct 27, 2026Updated last week
- AKCA Advanced Web Security Scanner☆252Oct 24, 2026Updated last week
- ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, a…☆872Updated this week
- Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can repla…☆1,807Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆412Oct 10, 2026Updated 3 weeks ago
- Pentest Copilot is an AI-powered browser based ethical hacking assistant tool designed to streamline pentesting workflows.☆1,549Aug 14, 2026Updated 2 months ago
- :)☆503Apr 26, 2026Updated 6 months ago
- GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failov…☆234Jul 18, 2026Updated 3 months ago
- A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk sco…☆216Oct 29, 2026Updated last week
- Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....☆632Updated this week
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆321Sep 30, 2026Updated last month
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆49Mar 16, 2026Updated 7 months ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,639Oct 28, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,419Updated this week
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- Kali Linux Polyglot Framework for Autonomous Pentesting/Cyber Security☆141Aug 16, 2026Updated 2 months ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,327Sep 1, 2026Updated 2 months ago
- Agentic offensive-security in your terminal☆1,445Aug 31, 2026Updated 2 months ago
- Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists wi…☆3,142Updated this week
- Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.☆2,418Updated this week