Bambda scripts
October 2, 2025 · View on GitHub
Welcome to the official Bambda scripts repository from PortSwigger. This repo contains a collection of scripts developed by both PortSwigger and the community with 🧡
📑 On this page
- Types of Bambda scripts
- Repository contents
- Importing scripts into Burp
- Updating scripts in your library
- Contributing your own scripts
- Resources
Types of Bambda scripts
Bambdas are scripts that run in supported Burp tools. They enable you to quickly personalize Burp Suite by creating:
- Table filters – Dynamically filter tables in Burp.
- Table columns – Add custom table columns to surface important data.
- Repeater custom actions – Extract, transform, and analyze data in Burp Repeater.
- Match and replace rules – Replace parts of HTTP and WebSocket messages as they pass through the proxy.
- Custom scan checks – Create your own active and passive scan checks. This repo contains checks written in Java. For checks written in our BChecks language, see the BChecks repository.
💡 You can use table filter scripts in both Burp Suite Community Edition and Burp Suite Professional. All other scripts require Burp Suite Professional.
Repository contents
You can explore the repository by script type:
Table filters
Table custom columns
Other types
- Repeater custom actions
- Match and replace rules
- Custom scan checks
- This repo contains checks written in Java. To view or contribute checks written in our BChecks language, see the BChecks GitHub repository.
Importing scripts into Burp
To use scripts from this repository, import them into your Bambda library in Burp. Once imported, you can load your scripts across Burp and in different projects as required.
To import GitHub scripts into Burp:
- Download scripts from this repo, or download the full repo as a ZIP file.
- If using the ZIP file, extract its contents.
- In Burp, go to Extensions > Bambda library.
- Click Import. The Import scripts dialog opens.
- Select the
.bambdafiles or the extracted ZIP folder. - Click Open.
Burp adds the selected files to your Bambda library. If you select a folder, Burp automatically finds and includes any .bambda files within it and its subfolders.
⚠️ Warning: Scripts can run arbitrary code. For security reasons, please be cautious when importing and using scripts.
Updating scripts in your library
To keep your scripts up to date with the latest changes in this repository, simply re-import them. Burp prompts you to confirm whether to overwrite existing scripts.
For more detailed guidance, see Updating your scripts.
Contributing your own scripts
Thank you for contributing to the community 🧡 We love seeing your scripts!
If you're new to contributing:
Start with the step-by-step guide:
➡️ Submitting scripts to our GitHub repository
If you've contributed before:
Check out the quick reference guide to refresh your memory on the process and guidelines:
➡️ Contributing quick reference guide
Please make sure you are familiar with and respect our Code of Conduct when making submissions.
Resources
Learn more about script types:
- Bambdas documentation – Detailed information on all script types and where they can be used.
- Bambdas – A quick video introduction with examples of filter scripts.
- Bambda table filters – Video overview of table filter scripts.
- Bambda table customization – Video overview of creating custom table column scripts.
- Introducing Custom Actions – Video on using custom actions to customize Burp Repeater.
- Introducing the Bambda library – Video on storing and managing your scripts.
Learn to write your own scripts:
- Creating scripts documentation – Guidance on creating scripts in Burp, including reference material and examples.
- Bambda output console – Video on using the output console to test and debug your scripts.
See scripts in action:
- Finding that one weird endpoint, with Bambdas – Blog post by James Kettle, on using filter scripts during testing.
- Lab: Limit overrun race conditions – Web Security Academy lab that uses a custom action.