A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

BurpSuite Pro, Plugins and Payloads

BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities

Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace Every GET or POST Parameters With Selected TAB in "Proxy" or "Repeater" TAB

Payloads to be used with Burp Suite Intruder. (Originally found on swisskeyrepo-PayloadsAllTheThings)

List of payloads for BurpSuite intruder. Payloads gathered from Swisskyrepos PayloadsAllTheThings

Tools and resources for web app hacking. The payloads.txt documents are a must have for your Burpsuite intruder payload armory. They've helped me discover some stubborn and well hidden XSS vulnerabilities.

Bypassing WAF filters using XML encoded SQL injection payloads with BurpSuite and Hackvertor.

Exploiting NoSQL injection to extract admin credentials from a MongoDB-backed application using BurpSuite and Boolean-based payloads.

An extension for BurpSuite used to access and modify compressed HTTP payloads without changing the content-encoding.

No description available

BurpSuite Intruder payloads

Payloads for Pentesting Using Burpsuite

A collection of payloads, context, and solutions to help assist in completion of the BurpSuite Certified Practitioner Certification Exam.

BurpSuite Pro, Plugins and Payloads

No description available

No description available

All intruder payloads from Burpsuite Professional Edition