This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite to create extensions that will greatly simplify our pentester lives.
☆51May 5, 2026Updated 2 weeks ago
Alternatives and similar repositories for Burp-Suite-Extender-Montoya-Course
Users that are interested in Burp-Suite-Extender-Montoya-Course are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆37Mar 4, 2025Updated last year
- A collection of utilities for building extensions using Burp's Montoya API☆51Apr 14, 2026Updated last month
- Terraform provider for command execution☆12Mar 16, 2020Updated 6 years ago
- Examples for using the Montoya API with Burp Suite☆187May 1, 2026Updated 3 weeks ago
- POC for leaking java version through file and ftp protocols☆24Nov 1, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- by Gary O'Leary-Steele | cloned from https://sentinel.appcheck-ng.com/static/pm/logger.html☆12Sep 16, 2019Updated 6 years ago
- A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.☆16Oct 11, 2023Updated 2 years ago
- This Burp extension helps you to find usages of postMessage and recvMessage☆14Feb 20, 2020Updated 6 years ago
- Prototype Pollution Lab☆18Nov 20, 2020Updated 5 years ago
- Automated HTTP Request Repeating With Burp Suite☆39Apr 3, 2023Updated 3 years ago
- Make better use of the embedded browser that comes by default with Burp☆43Jan 1, 2024Updated 2 years ago
- A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆28Dec 9, 2024Updated last year
- ☆36Jun 21, 2024Updated last year
- FETCH THE PASSWORD STRETCHER☆39Dec 8, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆28Jan 16, 2026Updated 4 months ago
- Token Tailor is a Burp Suite Community Edition extension that aims to simplify security testing by automating JWT renewal.☆36Sep 30, 2025Updated 7 months ago
- Small and highly portable detection tests.☆13Apr 13, 2018Updated 8 years ago
- Leverages B64 chunks to split files and save to clipboard☆26Dec 7, 2025Updated 5 months ago
- Dockerfile for AFL++ and helpful other tools☆21May 5, 2020Updated 6 years ago
- Creates and sends fake meeting invite☆75Apr 24, 2021Updated 5 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆11Apr 2, 2021Updated 5 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆355Oct 14, 2020Updated 5 years ago
- Application Security Mind Maps☆12Apr 10, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Nuclei templates for drupal vulns... far from perfect☆19Jan 9, 2025Updated last year
- ExtendedMacro - BurpSuite plugin providing extended macro functionality☆15Jan 13, 2021Updated 5 years ago
- ATT&CK Models of the Threat Actor "Phineas Fisher"☆20Apr 30, 2020Updated 6 years ago
- Sample exploits of common vulnerabilities in Java librarires☆27Dec 14, 2023Updated 2 years ago
- ☆64Mar 10, 2026Updated 2 months ago
- Let's check if your target is vulnerable for client side prototype pollution.☆65Jan 9, 2024Updated 2 years ago
- Alternative Mimikatz LSASS DUMPER☆14Apr 2, 2020Updated 6 years ago
- ☆38Jan 17, 2024Updated 2 years ago
- WebApp intentionally made vulnerable to Race Condition for practicing Race Condition☆25Feb 23, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- libssh CVE-2018-10933☆22Oct 20, 2018Updated 7 years ago
- WebSocket REPL for pentesters☆236Jul 24, 2024Updated last year
- Following OWASP TOP 10 (the top ten most critical web application security risk) I decided to build an XSS Scanner.☆12Dec 12, 2022Updated 3 years ago
- An extension to use Semgrep inside Burp Suite.☆89May 23, 2025Updated 11 months ago
- tetctf2020_amf_writeups☆23Jan 3, 2021Updated 5 years ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,341Aug 7, 2025Updated 9 months ago
- Blogpost series showcasing interesting cloud - web app security bugs☆67May 15, 2026Updated last week