Finger 是一款专为 Burp Suite 打造的模块化指纹识别插件，旨在通过被动流量监控与智能主动探测，快速识别目标站点的技术栈（CMS、框架、中间件、API 接口及敏感路径泄露）
☆30Apr 13, 2026Updated 5 months ago
Alternatives and similar repositories for burp-finger
Users that are interested in burp-finger are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- HaE MCP集成是基于 HaE 扩展开发的智能安全分析工具。该工具通过 MCP 协议为 AI 助手提供结构化的敏感信息访问接口，实现自动化的安全数据分析和验证功能。☆21Jan 26, 2026Updated 7 months ago
- 这是一个 XXE 漏洞检测工具（This is an XXE vulnerability detection tool）☆17Dec 10, 2024Updated last year
- Rinte是一款专为渗透测试人员设计的 BurpSuite 插件，提供强大的框架自动化安全扫描功能。目前支持1000+POC☆78Aug 13, 2026Updated last month
- BurpSuite 被动指纹识别 / Favicon Hash / 递归目录扫描 / 路径收集 一体化插件☆40Aug 7, 2026Updated last month
- pyxis can automatically identify http and https requests, and get response headers, status codes, response size, response time, tools for…☆72Oct 27, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- fscan结果优化，更新DC域筛选☆10Nov 21, 2023Updated 2 years ago
- SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。☆281Feb 6, 2026Updated 7 months ago
- Zack-AI-Scanner 是一款基于大语言模型的自动化 Web 漏洞扫描工具，作为 Burp Suite 扩展运行。通过 AI 深度学习技术自动分析 HTTP 请求特征，智能识别潜在安全漏洞，动态生成针对性测试Payload，并智能验证漏洞真实性。☆94Apr 13, 2026Updated 5 months ago
- TsoJanScan Burp Plugins Secondary Development☆102Jan 15, 2026Updated 8 months ago
- Burpsuite插件用于接口路径渗透测试☆47May 11, 2026Updated 4 months ago
- 一个基于 AI 驱动的 Burp Suite 渗透测试辅助插件，旨在利用大语言模型（LLM）的上下文理解能力，为复杂的 HTTP 请求自动生成针对性的 Fuzz 字典。☆44Jan 19, 2026Updated 8 months ago
- 一个基于agentscope开发的ai辅助渗透测试助手☆23Aug 25, 2026Updated 3 weeks ago
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆41Jul 26, 2026Updated last month
- ByPassTamperPlus / SQLMap加强绕WAF / Code By:Tas9er☆121Feb 12, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- chrome和edge查看exif有效信息的插件☆12Mar 3, 2025Updated last year
- Chrome 扩展：页面资产梳理 · 技术指纹识别 · Spring/Webpack 探测 · 云存储漏洞扫描 · 实战 Payload 字典。仅限授权安全测试。☆25Jul 22, 2026Updated last month
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件☆378Jun 7, 2024Updated 2 years ago
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆56Sep 3, 2026Updated 2 weeks ago
- 每日自动收集全网可用 Nuclei POC☆63Jul 14, 2026Updated 2 months ago
- JWT-scanner Burp Extension☆64Updated this week
- 基于load data逻辑漏洞的Mysql蜜罐☆24Jul 14, 2025Updated last year
- A passive recursive path probing extension for Burp Suite, built on the Montoya API with YAML rules and low-noise vulnerability detection…☆42Jul 26, 2026Updated last month
- Linux下进程隐藏检测与定位工具☆16Nov 2, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- afrog poc辅助生成yaml工具☆24May 12, 2026Updated 4 months ago
- 基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件☆180Mar 2, 2025Updated last year
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安 全分析和漏洞扫描功能。☆85Sep 1, 2026Updated 2 weeks ago
- burp越权测试插件☆20Sep 3, 2026Updated 2 weeks ago
- AegisX 是一款基于 **LangGraph** 和 **LLM (大语言模型)** 构建的下一代 Web 安全自动化渗透测试代理系统。它通过多智能体协作（Multi-Agent Collaboration）和反馈驱动的策略进化，模拟资深安全专家的思维逻辑，对目标进行深…☆21Jan 21, 2026Updated 7 months ago
- Aries is a free and open-source network scanner, support SYN scanning mode.☆33Sep 9, 2023Updated 3 years ago
- Burpsuite验证码DOS攻击插件。☆21Oct 24, 2024Updated last year
- 一款最全未授权访问漏洞批量检测工具，集成40+常见未授权访问漏洞。☆38Jul 4, 2025Updated last year
- XSS-Detector是一款基于多线程并发架构的Burp Suite扩展插件，通过精确请求-响应映射机制高效检测Web应 用中的XSS漏洞。☆27Apr 27, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆41Sep 17, 2025Updated last year
- 经过优化的渗透测试Payload字典、Fuzz Payload字典。Penetration testing Payload dictionary, Fuzzy Payload dictionary☆45Jul 10, 2024Updated 2 years ago
- MPET (Multi-Protocol Exploitation Toolkit) 是一款专业的多协议安全测试工具，基于 Wails 框架构建的现代化桌面应用。它提供了对 25+ 种主流服务协议的连接测试、未授权访问检测、弱口令检测和漏洞利用能力，是安全研究人员和渗透测试…☆224Jan 22, 2026Updated 7 months ago
- 内网漏洞验证截图自动生成报告☆15Aug 31, 2023Updated 3 years ago
- 红队必备，场景：在爆破批量封ip的情况下，爬取socks5代理在bp进行渗透测试。说明：可设置一个请求换一次socks代理ip，这样就绕过了封ip的情况。☆38Jun 28, 2024Updated 2 years ago
- 🔒 越权测试助手 (Privilege Escalation Testing Assistant)☆16Mar 28, 2025Updated last year
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆239Aug 16, 2026Updated last month