前端未授权访问检测工具,自动提取JS泄露的接口进行测试。
☆35Aug 25, 2023Updated 3 years ago
Alternatives and similar repositories for Unauthorized
Users that are interested in Unauthorized are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 瞎越是一款 Burp Suite 的安全插件,主要用于测试 Web 越权、未授权的网络安全漏洞。☆11Jun 13, 2024Updated 2 years ago
- sf is an efficient subdomain brute-forcing tool☆16Oct 13, 2023Updated 3 years ago
- 基于协程并发的Web敏感文件扫描器,精准探测备份文件、配置泄露及版本控制目录暴露风险,为渗透测试与安全防护提供专业级资产测绘方案。☆12Mar 6, 2025Updated last year
- 重点系统指纹识别的工具☆32Mar 1, 2022Updated 4 years ago
- 监控网站目录下的文件变更,通过钉钉机器人发送告警。☆13Apr 19, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆13May 1, 2023Updated 3 years ago
- ARL与AWVS联动,实现自动化扫描并推送结果☆20Jul 11, 2024Updated 2 years ago
- 内网综合扫描工具☆41Apr 16, 2024Updated 2 years ago
- PHP-Code-Audit☆13Aug 23, 2021Updated 5 years ago
- ☆21Feb 27, 2022Updated 4 years ago
- 本项目包含poc和exp,未经授权禁止攻击他人电脑。如个人违反安全相关法律,后果与本人无关☆30Sep 28, 2022Updated 4 years ago
- 一个burpsuite插件,用于被动检测可能存在的XSS漏洞的请求。后续将完善对于可以请求的xss探针、xss攻击以及DOM型xss检测。☆14Dec 26, 2018Updated 7 years ago
- 用友畅捷通T(TPlus) SQL注入批量POC QVD-2023-13612☆16Jun 28, 2023Updated 3 years ago
- Hikvision log4j PoC☆66Dec 29, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- this is my tools project ,welcome to start ...☆47Jul 18, 2023Updated 3 years ago
- 一款识别域名是否使用cdn的工具☆14May 21, 2023Updated 3 years ago
- ☆19Aug 25, 2022Updated 4 years ago
- Hession-Deserialize-RCE 反序列化命令执行☆24Dec 27, 2019Updated 6 years ago
- 致远OA利用工具☆26Jul 15, 2023Updated 3 years ago
- 使用Go语言开发的Linux权限审计工具☆13Jun 15, 2022Updated 4 years ago
- 根据多个不同地区进行聚合查询以获取更多 fofa 数据☆29Jul 24, 2023Updated 3 years ago
- 未授权检测的命令行版,支持批量检测☆158Apr 5, 2025Updated last year
- rce☆143Jun 15, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- burpsuite插件-被动无感识别指纹-主动poc扫描☆26Sep 13, 2024Updated 2 years ago
- 一款被动扫描ssrf的burpsuite插件☆20Dec 30, 2022Updated 3 years ago
- chrome和edge查看exif有效信息的插件☆12Mar 3, 2025Updated last year
- Godzilla4.01 decompile code☆29Feb 15, 2022Updated 4 years ago
- NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具,主要用于在代码审计和绕鉴权场景中节省时间☆24Mar 27, 2026Updated 7 months ago
- 快速筛选Enscan输出结果中的domain,让你在红蓝攻防中快人一步☆29Aug 13, 2025Updated last year
- Playwright Web 控制台探索 + Android/iOS 接口证 据提取(DEX、ELF .so、Mach-O)与受控验证 + MCP 网关。 Web UI crawler, APK/IPA native API evidence, mitmdump captur…☆28Updated this week
- 一款针对Spring框架的漏洞扫描及漏洞利用图形化工具☆237Jun 13, 2026Updated 4 months ago
- 爬网站JS文件,自动fuzz api接口,指定api接口(针对前后端分离项目,可指定后端接口地址),回显api响应☆765Jul 20, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 适用于burpsuite渗透工具的多类型恶意文件代码、漏洞测试payload、脚本代码快速获取复制的在线辅助插件。☆65Jan 31, 2022Updated 4 years ago
- js文件敏感信息内容提取☆28Aug 22, 2023Updated 3 years ago
- HAPPY JS 是一款面向 Web 安全测试与 JS 逆向工程的综合型浏览器扩展,融合了 **FindSomething(敏感信息扫描)**、**SnowEyes(指纹/资源发现)**、**AntiDebug_Breaker(反调试与 API Hook)** 三类项目的核…☆51Sep 16, 2026Updated last month
- JSFinder魔改版☆63Apr 5, 2023Updated 3 years ago
- Dirscan是一款由go编写的高性能、高并发的目录扫描器,现在已经支持GET、HEAD、递归扫描、代理、爬虫等功能功能,后续努力实现更多功能。☆237Dec 4, 2023Updated 2 years ago
- 备份下比赛附件☆22Jan 23, 2023Updated 3 years ago
- ☆25Mar 1, 2025Updated last year