结合chrome-devtools-mcp的能力并加上Skill的规范，实现JSRPC+Flask+autoDecoder方案的前端JS逆向自动化分析，提升JS逆向的效率
☆206Mar 19, 2026Updated last week
Alternatives and similar repositories for js-reverse-automation--skill
Users that are interested in js-reverse-automation--skill are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- URLReplayer是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。☆38Jan 15, 2026Updated 2 months ago
- exchange接口爆破|邮箱爆破☆20Sep 19, 2024Updated last year
- ☆16Mar 2, 2025Updated last year
- 为 AI Agent 设计的 JS 逆向 MCP Server，内置反检测，基于 chrome-devtools-mcp 重构 | JS reverse engineering MCP server with agent-first tool design and buil…☆370Mar 16, 2026Updated last week
- APIKit 是Burp Suite 的一个API接口扫描插件，该版本APIKit是对API-Security项目的APIKit1.0进行的二开，增加了扫描开关，避免直接打开burp乱扫被抓起来☆92Dec 19, 2025Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- uni_app抓包脚本☆38Jul 29, 2024Updated last year
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆170Oct 8, 2024Updated last year
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated last year
- 在Java安全学习过程中的笔记和代码☆94Mar 20, 2026Updated last week
- Log all keyboard and terminal input/output for any app 记录任意程序的键盘输入和终端输入输出☆23Sep 19, 2025Updated 6 months ago
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- AI-powered JS reverse engineering: deobfuscation, crypto detection, CDP debugging, hook injection, anti-detection | AI驱动JS逆向：反混淆、加密识别…☆98Feb 11, 2026Updated last month
- ☆12Jul 13, 2023Updated 2 years ago
- ☆23Mar 11, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 让fscan再次伟大☆332Feb 26, 2026Updated last month
- 优化后的URLFinder，可以通过自定义的正则表达式，对页面中的各类敏感信息提取☆150Jan 20, 2025Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆125Oct 12, 2024Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆553Dec 7, 2025Updated 3 months ago
- xiaSql的python魔改版☆15Oct 31, 2024Updated last year
- DockerApiRCE☆236Oct 22, 2024Updated last year
- 互联网厂商API利用工具。☆567Sep 13, 2024Updated last year
- protobuf逆向相关的资料收集☆99Jan 28, 2026Updated last month
- 金刚狼：首款支持AI渗透的WebShell MCP，首款支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，ShellCode加载(Metasploit/Cobalt Strik…☆169Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- riverPass 是一个用Go编写的瑞数WAF绕过工具。它利用了WebSocket协议，将请求发送的自身浏览器中，从而绕过了瑞数WAF的检测。☆234Oct 18, 2024Updated last year
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆572Feb 7, 2026Updated last month
- ☆28Aug 12, 2023Updated 2 years ago
- 综合后渗透方面的杂烩☆575Mar 1, 2026Updated 3 weeks ago
- 命令执行写任意文件，主要用于命令执行但不出网情况☆31Sep 9, 2023Updated 2 years ago
- A simple chrome-extension for website fingerprint extraction☆18May 28, 2025Updated 9 months ago
- 使用 rust 实现 CobaltStrike 的 beacon || Using Rust to implement CobaltStrike's Beacon☆201Jul 5, 2025Updated 8 months ago
- YongYou U8C deserialization file upload exploit tool targeting IPFxxFileService and IFileTrans services☆28Sep 28, 2025Updated 5 months ago
- 🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…☆784Mar 14, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 让"WAF绕过"变得简单☆432Jan 26, 2025Updated last year
- 一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具☆409Oct 6, 2024Updated last year
- ☆14Dec 8, 2022Updated 3 years ago
- 梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。☆577Mar 21, 2024Updated 2 years ago
- **S-APICONT** 是一款功能强大的 Burp Suite 扩展插件，专注于自动化收集、提取和测试 Web 应用中的 API 接口。它能够从浏览器流量中智能识别 API 端点，支持多种前端框架的路由解析，并提供批量测试和敏感信息检测功能。☆105Mar 7, 2026Updated 2 weeks ago
- 使用java编写的CRLF-Injection-burp被动扫描插件☆45Dec 20, 2022Updated 3 years ago
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated last year