burp-suite 开源项目推荐（497 个）

sleeyax /burp-awesome-tls

Burp扩展以逃避SSL指纹识别。绕过WAF，恶搞任何浏览器。

six2dez /burp-ai-agent

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

alphaSeclab /awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

synacktiv /HopLa

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

opentrap /opentrap

Burp Suite 的免费开源替代品：一款拦截式代理和 Web 应用安全测试套件，包含 Repeater、Intruder、Collaborator 以及内置的 OWASP ZAP 扫描器。适用于 Linux，AGPL-3.0。

Fausto-404 /js-reverse-automation--skill

结合 chrome-devtools-mcp 的能力并加上 Skill 规范，实现 JSRPC+Flask+autoDecoder 方案的前端 JS 逆向自动化分析，提升 JS 逆向效率

silentchainai /SILENTCHAIN

AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)

Teycir /BurpAPISecuritySuite

用于 API 安全测试的 Burp Suite 扩展，支持 15 种攻击类型、108+ 载荷、智能模糊测试、BOLA/IDOR 检测、AI 集成和自动化侦察。支持 REST/GraphQL/SOAP API，并集成 Nuclei、Turbo Intruder 和外部工具。覆盖 OWASP API Top 10。

0xrajneesh /Security-Assessments-projects-for-Beginners

Hands-on projects for beginners to learn and practice essential cybersecurity skills through security assessments.

praetorian-inc /vespasian

API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs

forefy /reburp

A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI

0xSHAK1B /TIKTOK-SSL-Pinning-Bypass

Bypass TikTok SSL/TLS certificate pinning on Android to intercept & analyze HTTPS traffic — root & no-root, works with Burp Suite, mitmproxy & Reqable (2026).

ZackSecurity /Zack-AI-Scanner

A Burp Suite extension that puts an LLM-driven vulnerability scan behind a right-click — or behind Proxy auto-scan (off by default), which turns parameterised proxy traffic into scan tasks. The model picks which parameters to attack and with what payloads; the payloads are really sent, and exploitability is decided from the evidence.

h4ckologic /bughunter-ai

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault, LLM security track. Type 'hunt target.com' and let AI find the bugs.

SagarBiswas-MultiHAT /penetration-testing-roadmap

🎯 A structured 60-week penetration testing curriculum with 500+ free TryHackMe labs, OWASP Top 10 deep dives, tool mastery guides, and certification roadmaps. Three learning paths from zero to professional pentester. 2026 Edition; includes AI/LLM, Cloud & API security.

cyspad /Weaponize-Your-Burp

Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite

D4mianWayne /BSCP

Cheatsheet, Notes, Payloads and Mayhem for Burp Suite Practitioner Exam (BSCP)

fdfsdfsdfss /spacepeng-frida-playground

SpacePeng Trainer 2026: Advanced Frida Script Examples & Game Hacks

0xrajneesh /Web-Pentesting-Projects-For-Beginners

适合初学者的 Web 渗透测试项目，用于动手学习。

anmolksachan /LLMInjector

Burp Suite Extension for LLM Prompt Injection Testing