GAP This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links...
Nuclei plugin for BurpSuite A BurpSuite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 29, 2019 · Last modified November 4, 2024
Today we introduce two batches of test injection point skills, this method can also be used for another FUZZ test. Use “Save items” to export HTTP/HTTPS packages to test Save...
Femida-xss An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp -> Extender -> Add -> find and select blind-xss.py How to use Settings First of all, you need...
Web Information Gathering / WebApp PenTest
by do son · Published November 15, 2017 · Last modified November 4, 2024
PwnBack Burp Extender plugin that generates a sitemap of a website using Wayback Machine PwnBack requires PhantomJS to run. You can download it from here To understand why it is required...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published November 5, 2017 · Last modified November 4, 2024
Serialized PHP toolkit for Burp Suite From a security testing perspective, one interesting feature of PHP is that of PHP Serialized objects. They typically show up as Base64 encoded strings...
Burp Attack Selector Plugin During latest years Burp Suite scanner checks has been expanded a lot, but unfortunately, the need for a scan time compromise has limited notably the checks...
Web Exploitation / WebApp PenTest
by do son · Published October 9, 2017 · Last modified November 4, 2024
burplay Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues. Download...
Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 15, 2017
HUNT Burp Suite Extension HUNT is a Burp Suite extension to: Identify common parameters vulnerable to certain vulnerability classes. Organize testing methodologies inside of Burp Suite. HUNT Scanner (hunt_scanner.py) This...
psychoPATH – a blind webroot file upload & LFI detection tool (now available in the Burp App Store!) psychoPATH – hunting file uploads & LFI in the dark This tool...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 9, 2017 · Last modified November 5, 2017
Airachnid Burp Extension A Burp extension to test applications for vulnerability to the Web Cache Deception attack. Once the extension has been loaded, it can be accessed in the Target...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 14, 2017 · Last modified November 4, 2024
burp-vulners-scanner Burp Suite scanner plugin based on Vulners.com vulnerability database API Search fingerprints in http response (inspired by plugin “Software Version Reporter”) and check found version in vulners.com vulnerability database [Experemental] Check...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published July 7, 2017 · Last modified November 4, 2024
Java Deserialization Scanner is a Burp Suite plugin aimed at detect and exploit Java deserialization vulnerabilities. It was written by Federico Dotta, a Security Advisor at @ Mediaservice.net. The plugin...
Burp suite has always been used to burst a variety of forms used to submit the login authentication, today I am going guide you how to use the Burp Suite...
Web Exploitation / WebApp PenTest
by do son · Published July 4, 2017 · Last modified November 4, 2024
Add headers to all Burp requests to bypass some WAF products. This extension will automatically add the following headers to all requests. Features Users can modify the X-Originating-IP, X-Forwarded-For, X-Remote-IP,...
Support Securityonline.info site. Thanks!
