PortSwigger/bypass-bot-detection

Stars
186
Rank 207,064 (Top 5 %)
Language
Java
License
Apache License 2.0
Created 3 months ago
Updated about 2 months ago

PortSwigger/bypass-bot-detection

PortSwigger

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

param-miner

http-request-smuggler

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

xss-cheatsheet-data

This repository contains all the XSS cheatsheet data to allow contributions from the community.

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

hackability

Probe a rendering engine for vulnerabilities and other features

BChecks

BChecks collection for Burp Suite Professional

dastardly-github-action

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

portable-data-exfiltration

This repo contains all the injections mentioned in my talk and enumerators.

distribute-damage

Evenly distributes scanner load across targets

httpoxy-scanner

A Burp Suite extension that checks for the HTTPoxy vulnerability.

replicator

Burp extension to help developers replicate findings from pen tests

burp-extensions-montoya-api

Burp Extensions Api

burp-extender-api

Burp Wiener API (Legacy)

python-scripter

Sourced from gist: https://gist.github.com/mwielgoszewski/7026954

css-exfiltration

serialization-examples

aws-security-checks

AWS Security Checks

example-hello-world

server-side-prototype-pollution

burp-extensions-montoya-api-examples

Examples for using the Montoya API with Burp Suite

example-intruder-payloads

example-scanner-checks

reflected-parameters

nice-script

A JavaScript sandbox using proxies

custom-logger

example-custom-editor-tab

example-event-listeners

bseept

Burp Suite Enterprise Edition Power Tools

research-labs

This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities found by Portswigger Research team.

3d-css-tutorial

example-custom-scan-insertion-points

waf-detect

Burp app (BApp) for detecting WAF fingerprints

enterprise-reference-stack-for-aws

viewstate-editor

Burp extension to add a view state tab to the message editor

random-ip-address-header

html5-auditor

certsquirt

A golang PKI in less than 1000 lines of code.

example-custom-session-tokens

example-custom-logger

manual-scan-issues

websphere-portlet-state-decoder

burp-jenkins-integration

Enterprise integration with Jenkins

open-day

enterprise-helm-charts

Helm charts for BSEE Kubernetes installation.