This repository provides a collection of custom plugins and scripts for BurpSuite. These tools help security researchers automate complex tasks, scan for web vulnerabilities, and manage request workflows efficiently.
BurpSuite is a professional tool for web application security. While the built-in features are strong, you often need custom plugins to handle specific tasks. This collection includes tools created by security experts to improve your workflow. It covers everything from SQLMap integration to Shiro and WAF evasion scanners.
Before you start, ensure your computer meets these requirements:
Follow these steps to download and add these tools to your BurpSuite instance.
Visit the official download page to get the latest scripts and plugins.
Click here to access the files on GitHub. Locate the green button labeled "Code" and select "Download ZIP". Save this file to a folder you recognize, such as your Desktop or Downloads folder.
Once the download completes, right-click the ZIP file and select "Extract All". Choose a location on your hard drive. This folder now contains all the Java plugins (JAR files) and Python scripts included in this collection.
Open BurpSuite. Navigate to the "Extender" tab. Click the "Extensions" sub-tab, then select "Add". Choose "Java" as the extension type. Click "Select file" and navigate to the folder where you extracted the tools. Choose the specific JAR file you wish to load and click "Next". BurpSuite will load the extension and display it in your dashboard.
This collection includes several types of tools:
Check the repository page regularly for updates. Security tools evolve as web technologies change. If a script stops working, download the updated version from the main link and re-load it into the Extender tab. You may need to remove the older version first to prevent conflicts.
Keywords: burpsuite, security, pentesting, automation, plugins, java, python, vulnerabilities, web-scanning