Nuclei plugin for BurpSuite A BurpSuite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate words for readability Binary...
Web Exploitation / WebApp PenTest
by do son · Published July 4, 2017 · Last modified January 29, 2023
Add headers to all Burp requests to bypass some WAF products. This extension will automatically add the following headers to all requests. Features Users can modify the X-Originating-IP, X-Forwarded-For, X-Remote-IP, X-Remote-Addr headers sent in...
Femida-xss An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp -> Extender -> Add -> find and select blind-xss.py How to use Settings First of all, you need to set up your...
Web Exploitation / Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 29, 2019 · Last modified August 28, 2019
Today we introduce two batches of test injection point skills, this method can also be used for another FUZZ test. Use “Save items” to export HTTP/HTTPS packages to test Save into .bat file Use...
Web Information Gathering / WebApp PenTest
by do son · Published November 15, 2017 · Last modified June 1, 2018
PwnBack Burp Extender plugin that generates a sitemap of a website using Wayback Machine PwnBack requires PhantomJS to run. You can download it from here To understand why it is required currently see the section PhantomsJS...
Burp suite has always been used to burst a variety of forms used to submit the login authentication, today I am going guide you how to use the Burp Suite to brute force HTTP...
Serialized PHP toolkit for Burp Suite From a security testing perspective, one interesting feature of PHP is that of PHP Serialized objects. They typically show up as Base64 encoded strings which, once decoded, resemble...
Web Vulnerability Analysis / WebApp PenTest
by do son · Published August 9, 2017 · Last modified November 5, 2017
Airachnid Burp Extension A Burp extension to test applications for vulnerability to the Web Cache Deception attack. Once the extension has been loaded, it can be accessed in the Target – Sitemap tab and...
Burp Attack Selector Plugin During latest years Burp Suite scanner checks has been expanded a lot, but unfortunately, the need for a scan time compromise has limited notably the checks executed during the scans...
burplay Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues. Download Burplay Burplay is a...
