Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and automated reconnaissance. Supports REST/GraphQL/SOAP APIs with Nuclei, Turbo Intruder, and external tool integration. OWASP API Top 10 coverage.
☆364Aug 15, 2026Updated 2 months ago
Alternatives and similar repositories for BurpAPISecuritySuite
Users that are interested in BurpAPISecuritySuite are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆488Feb 14, 2025Updated last year
- ☆92Aug 5, 2026Updated 2 months ago
- CVE-2026-24294 PoC☆62Apr 30, 2026Updated 5 months ago
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆452Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A curated collection of offensive, defensive and AI/LLM security tools.☆177Updated this week
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Burp suite extension that lets you easily copy issues☆17Apr 3, 2026Updated 6 months ago
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆183Jul 21, 2026Updated 2 months ago
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆316Sep 30, 2026Updated 2 weeks ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Steganography-Payload-Hider☆15Jan 8, 2026Updated 9 months ago
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last week
- A series of leaks from hacker forums☆364Aug 18, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Static auditor for randomness and nonce hygiene in Python source - flags weak PRNGs, hardcoded keys, reused counters, static IVs, short s…☆22Sep 5, 2026Updated last month
- A GUI for Sliver☆167Updated this week
- ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, a…☆629Oct 1, 2026Updated 2 weeks ago
- All my walkthroughs for HTB Academy labs in the Active Directory Module ( CPTS path ). Includes folder of canvas files for Obsidian.☆67Apr 27, 2026Updated 5 months ago
- ☆74Oct 10, 2026Updated last week
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated last year
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)☆193Updated this week
- The following code when compiled in go takes a domain name as an argument and outputs an HTML file with Google Search links for various d…☆18Sep 11, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Okta Data Collector for BloodHound Community☆17Sep 23, 2026Updated 3 weeks ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Ethiack AI Pentesting Benchmark Framework☆107Aug 20, 2026Updated last month
- ☆124Updated this week
- Corgea's rule-based SAST scanner☆286Updated this week
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆422Oct 7, 2026Updated last week
- OSINT intelligence on any IP, domain, or ASN☆19Jun 20, 2026Updated 3 months ago
- Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-…☆947Updated this week
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Transforming Smooth AD Automation Scripts into Attack Vectors☆20Nov 22, 2025Updated 10 months ago
- ☆19May 26, 2025Updated last year
- AKCA Advanced Web Security Scanner☆238Oct 10, 2026Updated last week
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 10 months ago
- Collection of powershell scripts I used to complete my CARTP and CARTE courses.☆49Feb 27, 2026Updated 7 months ago
- Redefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven press…☆232Updated this week
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 7 months ago