Web黑盒渗透测试技能
☆74Jun 27, 2026Updated 2 weeks ago
Alternatives and similar repositories for Pentest-Lyan
Users that are interested in Pentest-Lyan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhoo…☆23Jun 12, 2026Updated last month
- Helping AI Agent become an awesome practical hacker!☆1,362Jun 16, 2026Updated 3 weeks ago
- A AI general-purpose state-space search engine, validated first on autonomous penetration testing.☆1,974Jun 30, 2026Updated 2 weeks ago
- aimy-skill 是一个轻量级、可嵌入 AI Agent 的渗透测试辅助技能，专为授权环境下的自动化信息收集和基础漏洞探测设计。它可以被 AI 助手（如 AutoGPT、LangChain 应用）调用，也可以独立命令行运行。☆87Jun 29, 2026Updated 2 weeks ago
- ghost-bits-encoder 是一个面向 Woodpecker 的辅助插件，围绕 Ghost Bits / Unicode 高位包装思路，提供通用编解码、JSON 相关编码、URL 相关编码以及若干专项辅助能力。☆52May 15, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- iis高版本短文件名猜解脚本，适用于iis7.5~10.x版本的iis中间件。☆71Apr 6, 2025Updated last year
- 迄今为止公开的二开瞎注插件中最强版本：Xia SQL Plus，基于 “瞎注” xia_sql二次开发。☆103Feb 26, 2026Updated 4 months ago
- ☆23Apr 30, 2026Updated 2 months ago
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆41Sep 17, 2025Updated 9 months ago
- Mashang Claude Code: 社区增强版 Claude Code 工具集，支持一键启动面板、多服务商接入与开发者模式 。☆29Apr 5, 2026Updated 3 months ago
- SecKnowledge - Web与AI安全测试知识技能☆314Jun 17, 2026Updated 3 weeks ago
- Karma 是一款隐私优先的桌面应用，用于检测和脱敏个人身份信息（PII），基于 OpenAI Privacy Filter 模型。所有 AI 推理完全在本地设备上运行——您的数据永远不会离开您的设备。☆54May 21, 2026Updated last month
- 专注于代码审计skill，最小化轻量化skill，只 负责安全边界。☆963Jun 16, 2026Updated 3 weeks ago
- Jagged Frontier: LLM vulnerability detection benchmark harnesses (API + Claude Code agentic)☆16May 19, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- facai网安工具☆54May 27, 2026Updated last month
- ☆113Jun 17, 2026Updated 3 weeks ago
- 一款基于fofa api语句的资产收集工具，用于红队快速收集顶级域名或者ip相关关联的资产☆27Jul 13, 2023Updated 3 years ago
- A Windows tool that converts LDIF files to BloodHound CE☆30Dec 20, 2025Updated 6 months ago
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆552May 24, 2026Updated last month
- api接口测试工具,包括swagger文档，asp接口文档,wsdl接口,wadl接口,一键自动跑接口☆167Mar 30, 2026Updated 3 months ago
- Black Hat Asia 2026 Ghost Bits payload generate tools☆61Apr 29, 2026Updated 2 months ago
- 基于 Chrome Manifest V3 的渗透测试辅助插件，用于快速发现页面输入点、评估 CSP 风险、嗅探潜在敏感资产、识别常见前端框架指纹，并内置常用编码转换工具，帮助进行合法合规的渗透测试与安全检查☆74Mar 2, 2026Updated 4 months ago
- Chrome 浏览器插件-企业弱口令字典生成工具☆45May 21, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Java代码审计学习笔记☆13Dec 20, 2024Updated last year
- ☆61May 24, 2026Updated last month
- URLReplayer 是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。☆45Jan 15, 2026Updated 5 months ago
- ☆13May 17, 2023Updated 3 years ago
- Community collection of all available slide decks from [un]prompted 2026, the AI Security Practitioner Conference (March 3-4, San Francis…☆45Mar 17, 2026Updated 3 months ago
- 集成多种攻防技术与检测手段，帮助安全测试人员高效执行信息收集、漏洞挖掘、利用验证， 提升渗透测试的自动化与体系化水平，为安全团队快速发现潜在风险与攻击面提供有力支持。☆37Jun 15, 2026Updated 3 weeks ago
- 泛查询漏洞扫描Burp插件☆28Jun 26, 2026Updated 2 weeks ago
- SecaaS toolkit for AI-assisted secure development with Claude Code☆16Updated this week
- 一款支持检测web应用程序未授权访问 缺陷的burp suite插件，可自定义配置检测字段以及返回包json数据分析☆13Apr 22, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ExpFuzz字典☆21May 27, 2024Updated 2 years ago
- 一个基于 Tauri + Next.js 构建的现代化风险隐患报告管理与生成应用，专为网络安全评估、系统安全审计等场景设计。☆20Jun 26, 2025Updated last year
- 🛡️ 网络安全/AI Agent Skills 集合 | Cybersecurity Security Skills Collection☆243Jun 25, 2026Updated 2 weeks ago
- This is NOT a third-party Claude Code client. ClawGod is a runtime patch applied on top of the official Claude Code. It works with any ve…☆1,662Updated this week
- APIKit 是Burp Suite 的一个API接口扫描插件，该版本APIKit是对API-Security项目的APIKit1.0进行的二开，增加了扫描开关，避免直接打开burp乱扫被抓起来☆105Dec 19, 2025Updated 6 months ago
- 自动化 SRC 漏洞挖掘系统：FOFA 资产测绘 + LLM 多 worker 自主挖掘/审核/情报沉淀。Powered By StanleyNull☆78Updated this week
- fscan+xray全自动扫描☆82Aug 6, 2025Updated 11 months ago