漏洞报告已脱敏
☆283Jul 5, 2024Updated 2 years ago
Alternatives and similar repositories for src
Users that are interested in src are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp插件，自动化挖掘SSRF，Redirect，Sqli漏洞，自定义匹配参数☆491Sep 10, 2023Updated 3 years ago
- 目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查☆264Aug 16, 2025Updated last year
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,245Jun 24, 2025Updated last year
- CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！☆1,525May 25, 2026Updated 5 months ago
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动 探测与递归目录探测的burp插件☆376Jun 7, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,945Aug 2, 2024Updated 2 years ago
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated 2 years ago
- 实战沉淀字典☆1,594Sep 28, 2026Updated last month
- Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率☆823Feb 26, 2026Updated 8 months ago
- 让"WAF绕过"变得简单☆434Jan 26, 2025Updated last year
- 基于ARL-V2.6.2修改后的版本☆999Jun 26, 2025Updated last year
- **S-APICONT** 是一款功能强大的 Burp Suite 扩展插件，专注于自动化收集、提取和测试 Web 应用中的 API 接口。它能够从浏览器流量中智能识别 API 端点，支持多种前端框架的路由解析，并提供批量测试和敏感信息检测功能。☆129Mar 7, 2026Updated 7 months ago
- 一款用于网页敏感信息检测，指纹识别的chrome插件☆939Aug 10, 2026Updated 2 months ago
- 备份的漏洞库，3月开始我们来维护☆2,256Oct 20, 2026Updated last week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- xia SQL (瞎注) burp 插件 ，在每个参数后面填加一个单引号，两个单引号，一个简单的判断注入小插件。☆1,292May 18, 2023Updated 3 years ago
- 一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload☆630Dec 24, 2025Updated 10 months ago
- 优化后的URLFinder，可以通过自定义的正则表达式，对页面中的各类敏感信息提取☆152Jan 20, 2025Updated last year
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching. 精准匹配，智能替换！☆372Jun 28, 2026Updated 4 months ago
- jeecg综合漏洞利用工具☆459Aug 30, 2024Updated 2 years ago
- 攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。☆1,467Oct 3, 2024Updated 2 years ago
- 综合漏洞后渗透利用工具☆1,788Dec 11, 2025Updated 10 months ago
- 网络空间资产测绘、ICP备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。☆1,389May 19, 2026Updated 5 months ago
- 密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（聚合测绘，FO FA，Hunter，Quake,Zoomeye,DayDayMap,censys,shodan, 零零信安），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、Sessi…☆2,146Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- EZ是一款集信息收集、端口扫描、服务暴破、URL爬虫、指纹识别、被动扫描为一体的跨平台漏洞扫描器。☆1,075Jan 17, 2025Updated last year
- JavaSecLab is a comprehensive Java vulnerability platform｜ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互U…☆884Jun 9, 2026Updated 4 months ago
- 🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…☆778Mar 14, 2026Updated 7 months ago
- Nacos 综合漏洞利用工具☆693Sep 8, 2026Updated last month
- 红队浏览器插件-检测VUE站点未授权漏洞☆945May 7, 2026Updated 5 months ago
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆2,205Oct 11, 2026Updated 2 weeks ago
- httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the…☆85Apr 16, 2022Updated 4 years ago
- HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！☆4,400Oct 10, 2026Updated 2 weeks ago
- 一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.☆5,233May 11, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2-037、DevMode、S2-045/046、S2-052、S2-048、S2-053、S2-057…☆1,007Nov 3, 2025Updated 11 months ago
- 一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆4,464Updated this week
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated 2 years ago
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,249Jul 12, 2024Updated 2 years ago
- AutoBypass403-BurpSuite 插件二开重构，优化执行逻辑☆303Oct 12, 2024Updated 2 years ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,322May 10, 2026Updated 5 months ago
- 目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别☆890Sep 30, 2025Updated last year