| 序号 | 名称 | 名称 | 来源 |
| 1 | URISearch_V1.1_T00LS_bate | 目录扫描 | |
| 2 | turbo-intruder-all | 高速爆破 | https://github.com/PortSwigger/turbo-intruder |
| 3 | TsojanScan-1.4-jar-with-dependencies | 漏洞检测，支持thinkphp、weblogic、fastjson、Laravel、SQL | https://github.com/Tsojan/TsojanScan |
| 4 | sqlmap4burp++.0.2 | sqlmap联动 | https://github.com/c0ny1/sqlmap4burp-plus-plus |
| 5 | RouteVulScan-1.4 | 被动漏洞扫描 | https://github.com/F6JO/RouteVulScan |
| 6 | passive-scan-client-0.3.1 | passive-scan-client-0.3.1 | https://github.com/c0ny1/passive-scan-client |
| 7 | OutLook-1.2.0 | OutLook信息获取 | |
| 8 | NPSauto-1.0 | NPS反制 | |
| 9 | log4j2burpscanner-0.22.0 | lo4j2漏洞检测 | https://github.com/f0ng/log4j2burpscanner |
| 10 | knife-2.1-jar-with-dependencies | 综合工具类似hackbar | https://github.com/bit4woo/knife |
| 11 | struts_ext_v2 | struts漏洞检测 | |
| 12 | JWT4B-jar-with-dependencies | JWT | https://github.com/PortSwigger/json-web-tokens |
| 13 | J2EEScan | J2EE 应用程序漏洞检测 | https://github.com/ilmila/J2EEScan |
| 14 | HTTPHeadModifer.v0.1 | 快速修改HTTP数据包头 | |
| 15 | HaE-2.4.6-J8 | 请求高亮标记与信息提取的辅助型框架式插件 | https://github.com/gh0stkey/HaE |
| 16 | HackBar | hackbar | https://github.com/d3vilbug/HackBar |
| 17 | Fiora | 漏洞快速搜索 | https://github.com/bit4woo/Fiora |
| 18 | FastjsonScan | Fastjson反序列化检测 | https://github.com/Maskhe/FastjsonScan |
| 19 | fakeIP | 伪造指定ip | https://github.com/TheKingOfDuck/burpFakeIP |
| 20 | DaE | 解密 | |
| 21 | chunked-coding-converter-0.4.0 | 分块传输绕WAF | https://github.com/c0ny1/chunked-coding-converter |
| 22 | captcha-killer-modified-0.21-beta-jdk8 | 图像验证码爆破 | https://github.com/f0ng/captcha-killer-modified |
| 23 | BurpShiroPassiveScan | 被动式shiro检测 | https://github.com/pmiaowu/BurpShiroPassiveScan |
| 24 | BurpFastJsonScan | 被动式FastJson检测 | https://github.com/pmiaowu/BurpFastJsonScan |
| 25 | burp-info-extractor | 快速提取数据中有价值的信息 | https://github.com/theLSA/burp-info-extractor |
| 26 | Burp-Auto-Do-Intercept-0.0.3-all | 自动拦截指定URL | https://github.com/xiaoxiaoleo/Burp-Auto-Do-Intercept |
| 27 | APIKit | 主动/被动扫描发现应用泄露的API文档 | https://github.com/API-Security/APIKit |
原文始发于微信公众号（乌雲安全）：干货|burpsuite插件整理
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论