PortSwigger/turbo-intruder

Health v2 · maintenance only

Adoption not part of the score

1796 stars · 239 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests at exceptional speed and analyzing the results. It uses a hand-coded high-performance HTTP stack, is configured via Python scripts, and supports headless command-line runs for multi-day attacks.

Use cases

• send thousands of http requests fast for fuzzing
• test race conditions with single-packet attack
• brute-force endpoints at high request rates
• run multi-day http attacks with flat memory usage
• fuzz with signed requests or multi-step sequences
• filter boring responses automatically during attacks

When to choose

• you need to send huge volumes of requests to a single host faster than Burp Intruder or async Go scripts
• you need complex attack logic like signed requests or multi-step sequences via Python scripting
• you want to exploit race conditions using the single-packet attack
• you need headless, long-running attacks with reliable memory usage

When to avoid

• you want to send a single request to many hosts - use ZGrab instead
• you are a beginner - it is harder to use than Burp Intruder
• you need a battle-tested, reliable network stack for critical work
• you need personal support - the author provides none

Facets

plugin · maturity active

http-client security developer-tools cli security penetration-testing web-development cross-platform jvm cli burp-suite-extension race-conditions http-fuzzing single-packet-attack python-scripting bug-bounty

Member repositories

For agents

markdown · JSON · MCP: product_card(name="PortSwigger/turbo-intruder")