返回排行榜

whwlsfb/BurpCrypto

Javablog.wanghw.cn/burpcrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

burp-extensionsburp-pluginburpsuite-extenderburpsuitepayloadsburpcryptofuzz-testingexecute-js-encryptionctf-toolsctf
Star 增长趋势
Star
1.6k
Forks
175
周增长
Issues
16
5001k1.5k
2020年5月2022年5月2024年6月2026年7月
制品库Mavengit clone https://github.com/whwlsfb/BurpCrypto.git
README

BurpCrypto

Releases Downloads

Burpcrypto is a collection of burpsuite encryption plug-ins, supporting AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).

English | 简体中文

Build

$ mvn package

Usage

  • Download the precompiled jar package from Releases.
  • Add this jar package to your burpsuite's Extensions.
  • Switch to BurpCrypto tab, select you need Cipher tab.
  • Set key or some value.
  • press "Add processor", and give a name for this processor.
  • Switch to Intruder->Payloads->Payload Processing.
  • press "Add", select "Invoke Burp extension", and select processor you just created.
  • press "Start attack", have fun!

Key Example

  • Aes Key(UTF8String): abcdefgabcdefg12
  • Aes IV(UTF8String): abcdefgabcdefg12
  • Rsa X509 Key: MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCC0hrRIjb3noDWNtbDpANbjt5Iwu2NFeDwU16Ec87ToqeoIm2KI+cOs81JP9aTDk/jkAlU97mN8wZkEMDr5utAZtMVht7GLX33Wx9XjqxUsDfsGkqNL8dXJklWDu9Zh80Ui2Ug+340d5dZtKtd+nv09QZqGjdnSp9PTfFDBY133QIDAQAB
  • Rsa Modulus: ca27d90f03753cbbc9958011baf701ac99305b63f68e26ab5617593e01d2fb519127fb87bafbe6e0472ec3a038575fa292adadbc79390a955a61b29431f78f4734773048a45dcf100e23cabf2df11a55aa90cd6b024a44eed1096c3b9e1408d46aae54d7291b82fe4b7867c5eaa45e9cc0ba7f7ae3e5593337c7dcbace2d02ed2fbbff26c6df8a32bb26be80603fcd94c6c8dbd67878d77b37fedcf808e3d8f469aaa7c65d033d547a5c8ea9bdd5c89b836c65852f355a5efd9c7137a186a62b5eb0e052c8be3096d3b51133f8a8c108292a296c99d37bad42bcc3f6c39fa5e583582942b4fc4e7ff4b6779fff5bbaddc65b19c7c57d8cdb39b1a994e08d4a2f50793d8f707d069c380baf0f64bfdce3b35d0b5c5c59348a35a082012aaf4991080abf518b55787969ff24186cb95f7e7218c904cf1dcaeb5bed723e305b83f2e85d6f116d2c7400f9e49d904db8a5a3a0701cdb579fbf3128511acd0f789ece1233ed926d705b3b0dfa34bf33f5ae4bdc611a602aa03aaae13400bc7ad3813ea4474dc62de3d0cb1f5aac277d895a75d38f9b920938fa6b1de35bd6132798c122403c685bdb6e5e24bbd70cfb3e968da0b8affd398e539e7c1e7add09891780bcbd278f3900499ae09cee0dc62e3f92e70001bab6d46261d2801a37f80d84d0e39fce6eaedf106a61b5961960641b9db0e4e23c770e6370ac5d61c6c9eb0f07
  • Rsa Exponent: 010001
  • DES Key: 12345678
  • DESede Key: 123456781234567812345678

Screenshots

AES Example:

ExecJs Example (Here is the modified MD5 algorithm):

Quick Crypto:

404Starlink

png

BurpCrypto has joined 404Starlink.

相关仓库
Mr-xn/BurpSuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

HTMLMIT Licenseburpsuiteburpsuite-extender
mrxn.net
3.9k709
aress31/burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

JavaMavenApache License 2.0aiburp-extensions
2.3k283
API-Security/APIKit

APIKit:Discovery, Scan and Audit APIs Toolkit All In One.

JavaMavenGNU General Public License v3.0burp-extensionsapisec
2.3k179
bit4woo/knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

JavaMavenMIT Licenseburp-extensionsburpsuite-extender
bilibili.com/video/bv1BC4y1s7nS
1.9k206
f0ng/captcha-killer-modified

captcha-killer的修改版,支持关键词识别base64编码的图片,添加免费ocr库,用于验证码爆破,适配新版Burpsuite

JavaMavenburp-extensionsburp
f0ng.github.io/2022/03/24/burp%E9%AA%8C%E8%AF%81%E7%A0%81%E7%88%86%E7%A0%B4%E6%8F%92%E4%BB%B6%E4%BA%8C%E6%94%B9/
1.9k178
sleeyax/burp-awesome-tls

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

JavaMavenGNU General Public License v3.0burpsuiteburp-extensions
1.9k116
wagiro/BurpBounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

JavaMavenApache License 2.0bugbountyburp-extensions
1.8k336
doyensec/inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

KotlinApache License 2.0graphqlsecurity-scanner
doyensec.com
1.8k188
summitt/Nope-Proxy

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

JavaMavenappsecappsecurity
1.7k240
d3vilbug/HackBar

HackBar plugin for Burpsuite

JavaMavenMIT Licensehackbarburp-plugin
1.6k256
six2dez/burp-ai-agent

Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more

KotlinMIT Licensebugbountyburp
burp-ai-agent.six2dez.com
1.4k205
bit4woo/Fiora

Fiora:漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行,也可作为burp插件使用。

JavaMavennucleipoc
bilibili.com/video/bv1Ha411z7T1
1.3k149