F6JO/RouteVulScan

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1336 stars · 85 forks observed · 2026-10-14

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

RouteVulScan is a Burp Suite extension written in Java that passively and recursively probes each path layer of web traffic for vulnerable routes, matching responses against configurable regex rules. It sends a small number of accurate payloads to uncover easily-overlooked vulnerabilities that path brute-forcing would miss.

Use cases

• detect vulnerable paths on a website while browsing it through burp
• find sensitive files or endpoints hidden at any path depth
• passively scan burp traffic for weak routes without brute forcing
• customize regex rules to match specific vulnerability responses
• actively scan a target site's sitemap paths from a selected request

When to choose

• you already use Burp Suite and want passive recursive path vulnerability detection
• you want low-noise, accurate probes instead of large wordlist brute-forcing
• you need customizable regex rules and host whitelisting for scoped testing

When to avoid

• you need a standalone scanner outside of Burp Suite
• you require a license or official support - the project has no license file
• you need comprehensive active scanning with large payload dictionaries

Facets

plugin · maturity active

vulnerability-scanning penetration-testing security security penetration-testing web-development developer-tools jvm cross-platform burpsuite-extension passive-scanning vulnerability-scanner web-security path-scanning regex-matching

Member repositories

For agents

markdown · JSON · MCP: product_card(name="F6JO/RouteVulScan")