Finger 是一款专为 Burp Suite 打造的模块化指纹识别插件，旨在通过被动流量监控与智能主动探测，快速识别目标站点的技术栈（CMS、框架、中间件、API 接口及敏感路径泄露）
☆30Apr 13, 2026Updated 6 months ago
Alternatives and similar repositories for burp-finger
Users that are interested in burp-finger are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AiYue_Pro 是一款专为 Burp Suite 设计的高级被动扫描插件，旨在自动化检测 越权漏洞 (IDOR / Broken Access Control)。 它结合了多账号并发重放、智能染色和 AI 大模型深度分析技术，能够精准识别低权限或未授权账号是否能访问高…☆15Mar 19, 2026Updated 7 months ago
- HaE MCP集成是基于 HaE 扩展开发的智能安全分析工具。该工具通过 MCP 协议为 AI 助手提供结构化的敏感信息访问接口，实现自动化的安全数据分析和验证功能。☆21Jan 26, 2026Updated 9 months ago
- 这是一个 XXE 漏洞检测工具（This is an XXE vulnerability detection tool）☆17Dec 10, 2024Updated last year
- Rinte是一款专为渗透测试人员设计的 BurpSuite 插件，提供强大的框架自动化安全扫描功能。目前支持1000+POC☆79Aug 13, 2026Updated 2 months ago
- BurpSuite 被动指纹识别 / Favicon Hash / 递归目录扫描 / 路径收集 一体化插件☆41Aug 7, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- pyxis can automatically identify http and https requests, and get response headers, status codes, response size, response time, tools for…☆73Oct 27, 2025Updated last year
- fscan结果优化，更新DC域筛选☆10Nov 21, 2023Updated 2 years ago
- SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。☆280Feb 6, 2026Updated 8 months ago
- 一个基于 AI 驱动的 Burp Suite 渗透测试辅助插件，旨在利用大语言模型（LLM）的上下文理解能力，为复杂的 HTTP 请求自动生成针对性的 Fuzz 字典。☆44Jan 19, 2026Updated 9 months ago
- Burpsuite插件用 于接口路径渗透测试☆46May 11, 2026Updated 5 months ago
- TsoJanScan Burp Plugins Secondary Development☆104Jan 15, 2026Updated 9 months ago
- A Burp Suite extension that puts an LLM-driven vulnerability scan behind a right-click — or behind Proxy auto-scan (off by default), whic…☆104Sep 27, 2026Updated last month
- fastjson-1.2.83-gadget-rce漏洞利用工具☆19Jul 22, 2026Updated 3 months ago
- ByPassTamperPlus / SQLMap加强绕WAF / Code By:Tas9er☆123Feb 12, 2026Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 一个基于agentscope开发的ai辅助渗透测试助手☆25Oct 22, 2026Updated last week
- 基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件☆179Mar 2, 2025Updated last year
- 基于 AI Agent 的渗透测试自动化框架，严格遵循 PTES（Penetration Testing Execution Standard）标准，覆盖渗透测试全生命周期。| An automated penetration testing framework based…☆24Jul 28, 2026Updated 3 months ago
- ☆19Aug 25, 2022Updated 4 years ago
- A passive recursive path probing extension for Burp Suite, built on the Montoya API with YAML rules and low-noise vulnerability detection…☆42Jul 26, 2026Updated 3 months ago
- Tiger是一款在攻防演练中对目标资产重点系统指纹识别、精准漏扫的工具。是一款打点神器。☆142Aug 29, 2024Updated 2 years ago
- chrome和edge查看exif有效信息的插件☆12Mar 3, 2025Updated last year
- JWT-scanner Burp Extension☆64Oct 5, 2026Updated 3 weeks ago
- AegisX 是一款基于 **LangGraph** 和 **LLM (大语言模型)** 构建的下一代 Web 安全自动化渗透测试代理系统。它通过多智能体协作（Multi-Agent Collaboration）和反馈驱动的策略进化，模拟资深安全专家的思维逻辑，对目标进行深…☆21Jan 21, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 每日自动收集全网可用 Nuclei POC☆65Jul 14, 2026Updated 3 months ago
- 等保大模型测评 Skill：面向大模型系统（训练/推理/RAG/Agent/一体机）的网络安全等级保护测评方法体系，融合 GB/T 22239-2019、T/ISEAA 006-2024、GB/T 45654-2025、GB 45438-2025 及 2025 版高风险判定…☆21Sep 18, 2026Updated last month
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件☆376Jun 7, 2024Updated 2 years ago
- afrog poc辅助生成yaml工具☆23May 12, 2026Updated 5 months ago
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆55Sep 3, 2026Updated last month
- burp越权测试插件☆21Sep 3, 2026Updated last month
- Linux下进程隐藏检测与定位工具☆17Nov 2, 2024Updated last year
- Burpsuite验证码DOS攻击插件。☆21Oct 24, 2024Updated 2 years ago
- Chrome 扩展：页面资产梳理 · 技术指纹识别 · Spring/Webpack 探测 · 云存储漏洞扫描 · 实战 Payload 字典。仅限授权安全测试。☆25Jul 22, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Aries is a free and open-source network scanner, support SYN scanning mode.☆32Sep 9, 2023Updated 3 years ago
- 首个多维度，UI/UX友好的Burp suite越权漏洞检测插件☆47Oct 5, 2026Updated 3 weeks ago
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆84Oct 22, 2026Updated last week
- 基于load data逻辑漏洞的Mysql蜜罐☆24Jul 14, 2025Updated last year
- YuC0de(雨蔻)是一款无编译的SAST工具，基于静态分析、图分析、LLM来识别代码中的通用漏洞如：SQL注入、RCE、SSRF、不安全的反序列化、XSS...☆43Mar 25, 2026Updated 7 months ago
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆42Sep 17, 2025Updated last year
- 内网漏洞验证截图自动生成报告☆15Aug 31, 2023Updated 3 years ago