The official repository of @Burp_Suite extensions.

Joined June 2017
The PortSwigger Discord server has levelled up - check out real time BApp Store release updates over on the bapp-store-feed channel! In the meantime, here's the latest BApp Store releases ๐Ÿงต
1
3
652
New: HTTP History to PCAP ๐Ÿ“ฆ Export Burp Proxy history as full TCP flows in PCAP format ๐Ÿ” Simulate or reuse IPs, force port 80 for Wireshark decoding โฑ Preserves real packet timing, supports chunked payloads ๐ŸŒ IPv4 & IPv6 ready Perfect for replay & analysis!
1
1
11
803
New: WebSocket Traffic Monitor & Exporter ๐Ÿง  Captures WebSocket messages across all Burp tools ๐Ÿ” Shows tool origin & connection with unique IDs ๐Ÿ“ Export to CSV with direction, length & timestamps โฏ๏ธ Toggle live capture or grab from history via context menu
1
3
446
๐Ÿ” New on the BApp Store: Deep Data Injector Inject payloads into hard-to-reach places like encoded data, serialized objects, and custom tokens. ๐Ÿงฌ Custom & auto regex targeting ๐Ÿ› ๏ธ Scriptable encode/decode logic ๐Ÿ“ˆ Easily boost scan coverage
1
2
15
1,026
New: Report Generator Create pentesting reports in custom formatting directly from Burp Suite findings. ๐Ÿ“„ Export to PDF & Word formats ๐Ÿท๏ธ OWASP Top 10 2021 categorization ๐Ÿ“ธ Easy screenshot embedding Streamline your reporting workflow today.
1
7
17
1,393
New: PDF Render ๐Ÿ“„ Instantly view PDF files in HTTP responses ๐Ÿง  Auto-detect PDFs and display them in a custom tab ๐Ÿ–ฑ๏ธ Scroll & inspect without leaving Burp
1
6
30
1,118
New on the BApp Store: Passkey Raider! ๐Ÿ›‚ Seamlessly capture key Passkey components like clientDataJSON and signature ๐Ÿ•ต๏ธโ€โ™‚๏ธ Automatically identify and highlight Passkey-related requests in the Proxy ๐Ÿงฐ Auto-replace public keys and sign data in real-time during Passkey flows
1
7
34
2,131
New: PwnFox for Chromium Seamless multi-session testing in Burp Suite just got easier! ๐ŸŽฏ Launch up to 8 Chromium profiles from Burp ๐ŸŽจ Color-coded traffic per profile ๐Ÿ”’ Isolated sessions, cookies, history ๐Ÿ’พ Persistent config & profile data
2
14
1
76
5,249
New: Repeater Strike Written by @garethheyes, powered by Burp AI! Scale IDOR & fuzzing like never before: ๐Ÿค– Auto-build regex rules with AI ๐Ÿ“Š Scan proxy history for similar bugs ๐Ÿ› ๏ธ Save, edit, and re-run rules easily #BurpAI
2
22
1
115
8,261
Updated: Collaborator Everywhere ๐Ÿ› ๏ธ Full payload control (add/edit/toggle) ๐Ÿ“„ Persistent, detailed interaction log ๐Ÿ•ต๏ธ Proxy history highlights + timing info ๐Ÿง  Smart placeholders (Host, Origin, Referer) This extension has been rewritten and is now maintained by @compasssecurity
1
9
1
54
3,354