Hackvertor

Hackvertor is a tag-based conversion tool for transforming, encoding, decoding, encrypting, hashing, and otherwise manipulating data inside Burp Suite. Operations are expressed as XML-like tags such as <@base64>text</@base64>, which can be nested to any depth and accept string, boolean, or numeric arguments to compose complex conversion chains.

Features

• Large built-in tag library covering encoding, decoding, encryption, decryption, hashing, HMAC, compression, charset conversion, date, math, string manipulation, XSS payloads, conditions, and system operations.
• Unlimited tag nesting that evaluates from the innermost tag outwards, letting you build multi-step conversion pipelines in a single expression.
• Use tags directly in Repeater requests and in any request editor via a dedicated message editor tab, so the server receives the converted payload while you keep the readable tag in view.
• Create custom tags in JavaScript, Python, Groovy, or Java to extend the tag set with your own conversion logic.
• AI-assisted workflows: generate custom tag code from a natural-language prompt, run AI-only custom tags, auto-summarise custom tag code, and analyse Repeater traffic to derive encoding and decoding tags automatically.
• Global variables that can be referenced across tags and sessions, plus a Tag Automator for scripted multi-tag execution against requests and responses.
• Smart auto-decoding to identify and unwrap unknown encodings, with WebSocket support through the Montoya API.
• Copy converted output as a Bambda for reuse in other Burp features.

Usage

• Open the Hackvertor tab in Burp Suite and type or paste text into the input pane.
• Select the text you want to convert, then browse the category tabs (Encode, Decode, Hash, Encrypt, Languages, and so on) and click a tag to wrap the selection.
• Hackvertor evaluates the tags from the innermost outwards and shows the converted result in the output pane.
• To use tags in live traffic, right-click a request in Repeater and choose the Hackvertor menu, or switch a request editor to the Hackvertor message tab. Tags are rendered on send so the server receives the converted request.
• Open the Hackvertor menu and choose Create custom tag to add your own tag in JavaScript, Python, Groovy, Java, or AI, and manage stored variables under Global variables.

Hackvertor AI features

Use AI to generate code

This feature allows a user to generate custom tags in JavaScript, Python, Groovy or Java without any coding knowledge.

How to enable it

Go to Hackvertor settings in the Hackvertor menu and check the following options: Hackvertor → Settings → AI → Use AI to generate code

How it works

Go to the Hackvertor menu and create a custom tag (Hackvertor → Create custom tag). Give it a tag name, such as Reverse, and select your language. In this example, we will use JavaScript. In the code box, type your prompt. For example, "Reverse this text". Then click the Use AI to generate code button. This will generate the JavaScript code for you, based on the given prompt.

AI custom tags

Hackvertor also allows you to generate custom tags from AI prompts directly.

How to enable it

Go to Hackvertor settings in the Hackvertor menu and check the following options:

• Hackvertor → Settings → AI → Use AI to generate code

How it works

Go to the Hackvertor menu and create a custom tag (Hackvertor → Create custom tag). Give it a tag name, such as Reverse, and select AI as the language. In the code box, type your prompt. For example, "Reverse this text". Then click Create tag. You can now use this custom tag in the Hackvertor interface.

Summarise custom tag code

This will use AI to automatically create a text description of any custom tag. This works when you create or update a custom tag.

How to enable it

Go to Hackvertor settings in the Hackvertor menu and check the following options:

• Hackvertor → Settings → AI → Use AI to generate code
• Hackvertor → Settings → AI → Use AI to summarise custom tag code

How it works

Simply create a custom tag in a language, such as JavaScript, and Hackvertor will automatically give you a text description of what the code does.

Note: This does not work when creating an AI custom tag, as the prompt itself provides a description.

Learn from Repeater

This feature analyzes Repeater requests with AI, and tries to automatically produce the relevant encoding and decoding custom tags.

How to enable it

Go to Hackvertor settings in the Hackvertor menu and check the following options:

• Hackvertor → Settings → AI → Use AI to generate code
• Hackvertor → Settings → AI → Use AI to learn from Repeater

How it works

In Repeater, you need a request with an unknown encoding. For example, \x66\x6F\x6F\x62\x61\x72

Place this value in a GET parameter. For example:

GET /?x=\x66\x6F\x6F\x62\x61\x72 HTTP/2
Host: hackvertor.co.uk
Accept-Encoding: gzip, deflate, br
Accept: */*
Accept-Language: en-US;q=0.9,en;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6613.138 Safari/537.36
Cache-Control: max-age=0

Now send this request to Repeater around 5 times. After the 5th request Hackvertor should send the request to the AI for analysis. If successful, it should produce custom tags that encode or decode the encoding.

If you enable Debug AI requests in the Settings, you should see the conversation between Hackvertor and the AI.

When the tags have been created, they should be available in Hackvertor → List custom tags.

Copyright © 2015-2026 PortSwigger Ltd.