c0ny1/chunked-coding-converter

Health v2 · maintenance only

Adoption not part of the score

2029 stars · 295 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Burp Suite extension written in Java that converts HTTP request bodies to chunked transfer encoding, including delayed (sleep) chunking, to help bypass WAFs during penetration testing. It integrates into Burp's UI with configurable chunking options.

Use cases

• bypass WAF with chunked transfer encoding
• convert HTTP requests to chunked encoding in Burp Suite
• test WAF evasion with delayed chunked transfer
• evade WAF detection during Java deserialization payload testing
• split HTTP request payloads into chunks for security testing

When to choose

• you are doing authorized penetration testing against WAF-protected applications
• you need to test whether a WAF inspects chunked request bodies
• you want a Burp-integrated tool for chunked transfer encoding experiments

When to avoid

• you need a general-purpose HTTP proxy rather than a WAF evasion helper
• you are not using Burp Suite
• you lack authorization to test the target system

Facets

plugin · maturity maintenance

security http-client developer-tools security penetration-testing web-development jvm burpsuite-extension waf-bypass chunked-transfer-encoding penetration-testing desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="c0ny1/chunked-coding-converter")