ShadowScan 是一款面向安全从业人员的自动化信息泄露扫描与资产测绘工具。深度整合多平台搜索引擎，通过自动化 Dork 语法扫描发现暴露在公网的敏感文件，并自动提取身份证号、手机号、学号、邮箱、银行卡号等个人敏感信息（PII）。 支持 **Bing / FoFa / Hunter / Quake / Shodan / Censys / Zoomeye / 0.zone / DayDayMap ** 等主流搜索引擎与资产测绘平台。
☆50Jun 10, 2026Updated 4 months ago
Alternatives and similar repositories for ShadowScan
Users that are interested in ShadowScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- FLUX 是一款专业的Web安全扫描工具，JS敏感信息收集、API端点提取、API文档解析、页面爬取、子域名发现、漏洞测试、WAF检测与绕过、JS代码分析等功能。☆250May 6, 2026Updated 5 months ago
- NoAuth 是一款用于动态生成可能绕过 Java 鉴权的 payload 并进行 fuzz 测试的工具，主要用于在代码审计和绕鉴权场景中节省时间☆24Mar 27, 2026Updated 6 months ago
- r0capture增加forward功能☆35Jan 31, 2023Updated 3 years ago
- api接口测试工具,包括swagger文档，asp接口文档,wsdl接口,wadl接口,一键自动跑接口☆180Mar 30, 2026Updated 6 months ago
- 由ABC_123编写的Web日志分析工具☆158Jun 28, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 云安全漏洞挖掘与利用 Skill。S3 桶爆破枚举、公开桶敏感文件发现、SSRF→IMDS 凭证窃取探测、K8s 未授权访问检测、容器逃逸条件识别、 AK/SK 凭证验证与权限枚举、存储桶供应链攻击利用。☆33Jul 14, 2026Updated 3 months ago
- Hengge team develops JavaScript specifically for loading Webpack for batch reading☆340Jun 11, 2026Updated 4 months ago
- AI-agent skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）☆83Updated this week
- AI一键免杀WebShell，包含金刚狼、哥斯拉、冰蝎、菜刀等☆28Jun 7, 2026Updated 4 months ago
- 基于 Burp Montoya API 开发 的全能插件，集成自动化HTTP加解密、高危漏洞扫描（Fastjson/Log4j/Shiro/Spring未授权）与安全工具联动（sqlmap/xray），支持 Burp Collaborator 与 CEYE DNSLog，专为…☆43Jun 11, 2026Updated 4 months ago
- (目前功能可能存在bug，正在不断完善功能中)黄油曲奇是一款集成化渗透测试浏览器插件，专为安全测试人员和开发者设计。它提供了丰富的安全测试工具，包括信息收集、XSS测试、SQL注入测试、端点安全扫描、Shodan主机信息查询以及多种辅助工具，帮助用户快速识别和评估Web应用…☆111Jun 17, 2026Updated 4 months ago
- 重构DDDD，与DLDL联动快速实现POC与指纹的结合，提高红队资产发现与打点效率☆58Sep 15, 2026Updated last month
- HiddenDomainHunter☆20Apr 15, 2023Updated 3 years ago
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆264Aug 16, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ssrf_proxy☆13Jun 9, 2023Updated 3 years ago
- WindFtsy的WEB应用黑盒测试技能☆79Oct 8, 2026Updated 2 weeks ago
- SwordfishSuite - Web安全测试利器 一款轻量、高速、插件化的现代Web安全测试工具，专为安全研究员和渗透测试者打造。 ✨ 核心特性： 智能代理：无缝拦截与修改HTTP/S请求，流畅度超越BurpSuite。 高度集成：集成云端虚拟手机，快速定位AP…☆91Apr 10, 2026Updated 6 months ago
- 由夜安团队研发的AI Agent渗透测试平台，强调自监督，自循环，自进化首创寻宝机制、三段式上升结构，此项目主要探索在可控环境（CTF）下的能力☆672Updated this week
- 网站渗透测试 Skill — 目标识别、CDN/WAF检测、指纹架构、API发现、端口扫描、未授权与漏洞验证☆32Jun 8, 2026Updated 4 months ago
- ☆13Nov 7, 2023Updated 2 years ago
- **S-APICONT** 是一款功能强大的 Burp Suite 扩展插件，专注于自动化收集、提取和测试 Web 应用中的 API 接口。它能够从浏览器流量中智能识别 API 端点，支持多种前端框架的路由解析，并提供批量测试和敏感信息检测功能。☆128Mar 7, 2026Updated 7 months ago
- Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligen…☆117Jan 13, 2026Updated 9 months ago
- 一款src捡洞扫描器☆27Jan 13, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 面向 Chrome/Firefox 的轻量级浏览器安全工作台：集成抓包、拦截改包、重放/Fuzz、编解码工作台、敏感信息检测、HawkEye MCP 与浏览器级 Agent。（A lightweight Chrome/Firefox browser security wor…☆98Oct 14, 2026Updated last week
- JeecgBoot Go版本综合漏洞检测工具☆104Feb 24, 2026Updated 7 months ago
- DudeSuite SQLMAP 中文版☆29Oct 3, 2024Updated 2 years ago
- 瞎测，主要针对iot设备，路由器、网关、防火墙的常规命令执行、溢出测试☆27Apr 19, 2025Updated last year
- 爆破md5(用户名+密码+salt)的脚本☆12Nov 15, 2021Updated 4 years ago
- AI 驱动的后渗透综合管理平台，深度集成 LLM Agent，开箱即用。☆322Updated this week
- 一款基于流式处理架构的蓝队流量分析工具，集成Webshell检测、OWASP攻击识别、自动解码和隐写分析能力的工具/Stream-based Blue Team traffic analyzer with integrated Webshell detection, OWA…☆32Aug 21, 2026Updated 2 months ago
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching. 精准匹配，智能替换！☆373Jun 28, 2026Updated 3 months ago
- 面向 DeepSeek Harness（dsh）的渗透测试模式 @CloverSecLabs☆608Oct 9, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Lightweight AI red teaming harness for authorized agent / GenAI challenges (BCTF Agent Plus–style): schedule, bounded recon, validate, di…☆28Aug 26, 2026Updated last month
- 应急分析溯源日志工具：一个功能强大的Web日志安全分析工具，集成了规则引擎、AI智能分析和多格式报告生成，专为安全应急响应和威胁溯源而设计。☆142Oct 10, 2026Updated last week
- Pangolin is developed using Go and Fyne, currently focusing on proximity-based internal network penetration testing for mobile platforms�…☆36Nov 13, 2024Updated last year
- 自动化爬取并自动测试所有swagger接口☆1,189Dec 1, 2025Updated 10 months ago
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,946Aug 2, 2024Updated 2 years ago
- vcenter图形化漏洞利用工具☆70Nov 17, 2024Updated last year
- 浏览器存储桶配置漏洞检测插件☆280Nov 27, 2025Updated 10 months ago