Rule-based request blocking for Burp Suite.
Silently drop Proxy requests that match host/path patterns you define — kill telemetry, analytics beacons, and noisy third-party calls before they ever leave your machine.
English · 简体中文
ReqDrop adds a ReqDrop tab to Burp Suite. Every request that passes through the Proxy is checked against your rule list; if it matches an enabled rule, the request is dropped — Burp never forwards it, and you see it recorded in the drop log.
It's the fastest way to stop the noise that clutters your Proxy history: update pings, crash reporters, ad and analytics endpoints, or any host you simply don't want your target talking to during a test.
- Host and/or path matching — write a rule against the host, the path, or both.
- Two match modes — Wildcard (
*,?) for quick rules, or full Regex for precise control. - Master switch — toggle all blocking on/off without deleting a single rule.
- Per-rule enable/disable — flip individual rules from the table with a checkbox.
- Live drop log — the last 2000 dropped requests, showing time, method, host, URL, and which rule caught them.
- Hit counters — see how many times each rule has fired, at a glance.
- Persistent — rules and settings are saved with your Burp project and restored on reload.
- Fails open — if a rule errors internally, the request is passed through, never silently lost.
- Lightweight — a thin jar with no bundled dependencies; the Burp API is provided at runtime.
- Download
reqdrop-<version>.jarfrom the latest release. - In Burp Suite, go to Extensions → Installed → Add.
- Set Extension type to Java, select the jar, and click Next.
- The ReqDrop tab appears in the main toolbar.
Requires a Burp Suite version that supports the Montoya API (Burp 2023.1 and later).
- Open the ReqDrop tab and make sure Enable ReqDrop is checked.
- Click Add to create a rule:
- Host pattern — e.g.
*.google-analytics.com(host matching is case-insensitive). - Path pattern — e.g.
/telemetry/*. Leave either field blank to match any value. - Match mode — Wildcard or Regex.
- Comment — an optional note to remind you what the rule is for.
- Host pattern — e.g.
- Route your target's traffic through Burp Proxy as usual. Matching requests are dropped and appear in the Dropped requests log below the rule table.
Example rules
| Host pattern | Path pattern | Mode | Blocks |
|---|---|---|---|
*.google-analytics.com |
Wildcard | All Google Analytics traffic | |
sentry.io |
/api/*/store/ |
Wildcard | Sentry crash-report ingestion |
\.(png|jpg|gif|woff2?)$ |
Regex | Static image/font requests |
Rules are evaluated top to bottom; the first match wins.
Requires JDK 21 to build (the extension itself targets Java 17 bytecode).
git clone https://github.com/huohua-dev/ReqDrop.git
cd ReqDrop
./gradlew buildThe extension jar is written to build/libs/reqdrop.jar.
Pushing a v* tag triggers the release workflow, which builds and tests the project on JDK 21 and publishes reqdrop-<tag>.jar as a GitHub release asset.
git tag v0.1.0
git push origin v0.1.0Released under the MIT License.