
The official repository of @Burp_Suite extensions.
Joined June 2017
- Tweets1.2K
- Following1
- Followers11.1K
- Likes0
The PortSwigger Discord server has levelled up - check out real time BApp Store release updates over on the bapp-store-feed channel!
In the meantime, here's the latest BApp Store releases ๐งต
New: HTTP History to PCAP
๐ฆ Export Burp Proxy history as full TCP flows in PCAP format
๐ Simulate or reuse IPs, force port 80 for Wireshark decoding
โฑ Preserves real packet timing, supports chunked payloads
๐ IPv4 & IPv6 ready
Perfect for replay & analysis!
New: WebSocket Traffic Monitor & Exporter
๐ง Captures WebSocket messages across all Burp tools
๐ Shows tool origin & connection with unique IDs
๐ Export to CSV with direction, length & timestamps
โฏ๏ธ Toggle live capture or grab from history via context menu
๐ New on the BApp Store: Deep Data Injector
Inject payloads into hard-to-reach places like encoded data, serialized objects, and custom tokens.
๐งฌ Custom & auto regex targeting
๐ ๏ธ Scriptable encode/decode logic
๐ Easily boost scan coverage
New: Report Generator
Create pentesting reports in custom formatting directly from Burp Suite findings.
๐ Export to PDF & Word formats
๐ท๏ธ OWASP Top 10 2021 categorization
๐ธ Easy screenshot embedding
Streamline your reporting workflow today.
New: PDF Render
๐ Instantly view PDF files in HTTP responses
๐ง Auto-detect PDFs and display them in a custom tab
๐ฑ๏ธ Scroll & inspect without leaving Burp
New on the BApp Store: Passkey Raider!
๐ Seamlessly capture key Passkey components like clientDataJSON and signature
๐ต๏ธโโ๏ธ Automatically identify and highlight Passkey-related requests in the Proxy
๐งฐ Auto-replace public keys and sign data in real-time during Passkey flows
New: PwnFox for Chromium
Seamless multi-session testing in Burp Suite just got easier!
๐ฏ Launch up to 8 Chromium profiles from Burp
๐จ Color-coded traffic per profile
๐ Isolated sessions, cookies, history
๐พ Persistent config & profile data
New: Repeater Strike
Written by @garethheyes, powered by Burp AI!
Scale IDOR & fuzzing like never before:
๐ค Auto-build regex rules with AI
๐ Scan proxy history for similar bugs
๐ ๏ธ Save, edit, and re-run rules easily
#BurpAI
Updated: Collaborator Everywhere
๐ ๏ธ Full payload control (add/edit/toggle)
๐ Persistent, detailed interaction log
๐ต๏ธ Proxy history highlights + timing info
๐ง Smart placeholders (Host, Origin, Referer)
This extension has been rewritten and is now maintained by @compasssecurity









