#1 Locally hosted web application that allows you to perform various operations on PDF files

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

Tools for keeping your cloud operating in top form. Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

Vulnerable app with examples showing how to not use secrets

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.

Advanced Burp Suite Logging Extension

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

Antivirus for Amazon S3

SHELLING - a comprehensive OS command injection payload generator

JWT Support for Burp

Just-In-Time Access is a self-service web application that lets you manage just-in-time privileged access to Google Cloud projects. JIT Access runs on App Engine and Cloud Run.

Automate security tests using Burp Suite.

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

XSS Hunter Burp Plugin

FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application and matches their occurrences in the responses.

An extension for BurpSuite that highlights SSO messages in Burp's proxy window..

A Burp Suite extension for finding DNS vulnerabilities in web applications!

SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens

Program to analyze mails stored into a Microsoft Outlook PST file and find one based on search keywords.

Parse OpenAPI specifications, previously known as Swagger specifications, into the BurpSuite for automating RESTful API testing – approved by Burp for inclusion in their official BApp Store.

This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an alternative to proxying bruteforcing tools through burp to …

Vulnerable webapp testbed