Professional Community

UnUnicode

This extension unescapes unicode-escaped sequences in HTTP requests and responses, as well as WebSocket messages. It helps uncover obfuscated payloads or identifiers that use multiple layers of Unicode escaping, improving visibility for manual inspection.

Features

  • Automatically decodes nested Unicode sequences in HTTP messages
  • Adds a custom tab for viewing the unescaped content of selected requests and responses
  • Provides "pretty print" functionality for JSON content

Usage

  1. Select a request or response in the HTTP history or other Burp tool.
  2. Navigate to the "UnUnicode" tab to view the decoded version of the message.
  3. Use the decoded output to better understand any obfuscated content.

Author

Author

godfuzz3r

Version

Version

1.3.0

Rating

Rating

Popularity

Popularity

Last updated

Last updated

08 July 2025

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.