outlaws-bai/Galaxy

Health v2 · maintenance only

Adoption not part of the score

1109 stars · 72 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Galaxy is a Burp Suite extension that automatically decrypts and re-encrypts HTTP traffic whose payloads are encrypted, letting testers work with plaintext in Proxy, Repeater, Intruder, and Scanner. It supports custom hooks for complex encryption logic and integrates with tools like sqlmap and xray for scanning decrypted requests.

Use cases

• decrypt encrypted HTTP request and response bodies in Burp Suite
• test web APIs that encrypt traffic with custom or combined algorithms
• send decrypted plaintext requests to sqlmap for SQL injection scanning
• forward decrypted requests to xray for automated vulnerability scanning
• hook client-side code to reverse and invoke a site's encryption logic
• fuzz encrypted parameters with Burp Intruder in plaintext

When to choose

• you are pentesting a site whose HTTP messages are encrypted
• encryption logic is complex, e.g. algorithm combinations, custom ciphers, or dynamic keys
• you want scanners like sqlmap or xray to work against encrypted traffic
• you can reverse the site's crypto logic or hook its client code

When to avoid

• traffic is plain HTTP/HTTPS without application-layer encryption
• you cannot reverse or hook the site's encryption logic
• you need a standalone proxy outside Burp Suite

Facets

plugin · maturity active

security penetration-testing proxy middleware security penetration-testing web-development jvm burpsuite burp-extension traffic-decryption mitm encrypted-traffic pentest sqlmap xray desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="outlaws-bai/Galaxy")