Alternatives and similar repositories for BurpSuite-collections

Users that are interested in BurpSuite-collections are comparing it to the libraries listed below

• bit4woo / domain_hunter_pro

  View on GitHub
  domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
  ☆2,116Jan 23, 2026Updated 3 weeks ago
• Mr-xn / Penetration_Testing_POC

  View on GitHub
  渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…
  ☆7,217Updated this week
• TheKingOfDuck / fuzzDicts

  View on GitHub
  You Know, For WEB Fuzzing !
  ☆8,255Nov 13, 2023Updated 2 years ago
• rtcatc / Packer-Fuzzer

  View on GitHub
  Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack…
  ☆3,205May 24, 2024Updated last year
• EdgeSecurityTeam / EHole

  View on GitHub
  EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具
  ☆3,435Apr 2, 2024Updated last year
• bit4woo / knife

  View on GitHub
  A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅
  ☆1,893Jan 15, 2026Updated last month
• pmiaowu / BurpShiroPassiveScan

  View on GitHub
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,790Dec 14, 2022Updated 3 years ago
• gh0stkey / HaE

  View on GitHub
  HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.
  ☆4,030Updated this week
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,521Jul 17, 2021Updated 4 years ago
• BeichenDream / Godzilla

  View on GitHub
  哥斯拉
  ☆4,329Jul 17, 2024Updated last year
• c0ny1 / passive-scan-client

  View on GitHub
  Burp被动扫描流量转发插件
  ☆1,459Jun 17, 2024Updated last year
• LandGrey / SpringBootVulExploit

  View on GitHub
  SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
  ☆6,116Mar 10, 2021Updated 4 years ago
• gh0stkey / Web-Fuzzing-Box

  View on GitHub
  Web Fuzzing Box - Web 模糊测试字典与一些Payloads
  ☆2,442May 28, 2025Updated 8 months ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,021Feb 23, 2022Updated 3 years ago
• kelvinBen / AppInfoScanner

  View on GitHub
  一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN…
  ☆3,506Dec 18, 2022Updated 3 years ago
• shmilylty / OneForAll

  View on GitHub
  OneForAll是一款功能强大的子域收集工具
  ☆9,601Sep 12, 2025Updated 5 months ago
• zhzyker / exphub

  View on GitHub
  Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、…
  ☆4,274Apr 4, 2021Updated 4 years ago
• rebeyond / Behinder

  View on GitHub
  “冰蝎”动态二进制加密网站管理客户端
  ☆6,129Aug 24, 2023Updated 2 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,010May 21, 2024Updated last year
• zer0yu / Awesome-CobaltStrike

  View on GitHub
  List of Awesome CobaltStrike Resources
  ☆4,384Sep 20, 2023Updated 2 years ago
• xiaoy-sec / Pentest_Note

  View on GitHub
  渗透测试常规操作记录
  ☆4,041May 22, 2023Updated 2 years ago
• 0x727 / ShuiZe_0x727

  View on GitHub
  信息收集自动化工具
  ☆3,984Jun 13, 2024Updated last year
• TheKingOfDuck / burpFakeIP

  View on GitHub
  服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件
  ☆1,640Sep 29, 2022Updated 3 years ago
• lz520520 / railgun

  View on GitHub
  ☆2,278Jan 17, 2025Updated last year
• ffffffff0x / 1earn

  View on GitHub
  ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
  ☆5,647Jun 6, 2024Updated last year
• Threezh1 / JSFinder

  View on GitHub
  JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
  ☆2,910Nov 24, 2021Updated 4 years ago
• TideSec / BypassAntiVirus

  View on GitHub
  远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。
  ☆5,021Sep 14, 2024Updated last year
• SummerSec / ShiroAttack2

  View on GitHub
  shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
  ☆2,378Apr 10, 2024Updated last year
• insightglacier / Dictionary-Of-Pentesting

  View on GitHub
  Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
  ☆2,028Jul 21, 2023Updated 2 years ago
• feihong-cs / ShiroExploit-Deprecated

  View on GitHub
  Shiro550/Shiro721 一键化利用工具，支持多种回显方式
  ☆1,949Jun 4, 2021Updated 4 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,237Oct 1, 2022Updated 3 years ago
• zhzyker / vulmap

  View on GitHub
  Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
  ☆3,508Apr 26, 2023Updated 2 years ago
• woodpecker-framework / woodpecker-framework-release

  View on GitHub
  高危漏洞精准检测与深度利用框架
  ☆1,456Jan 8, 2023Updated 3 years ago
• whwlsfb / BurpCrypto

  View on GitHub
  BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算…
  ☆1,618Aug 4, 2023Updated 2 years ago
• SafeGroceryStore / MDUT

  View on GitHub
  MDUT - Multiple Database Utilization Tools
  ☆2,188Sep 22, 2023Updated 2 years ago
• fofapro / vulfocus

  View on GitHub
  🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
  ☆3,433Sep 9, 2025Updated 5 months ago
• lcvvvv / kscan

  View on GitHub
  Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。
  ☆4,247Aug 22, 2023Updated 2 years ago
• API-Security / APIKit

  View on GitHub
  APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
  ☆2,238Apr 2, 2024Updated last year
• 0x727 / SpringBootExploit

  View on GitHub
  项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。
  ☆1,898Jan 15, 2024Updated 2 years ago