实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计
☆569May 24, 2026Updated last month
Alternatives and similar repositories for src-hunter-skill
Users that are interested in src-hunter-skill are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆969Jun 16, 2026Updated last month
- 红队浏览器插件-检测VUE站点未授权漏洞☆900May 7, 2026Updated 2 months ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,551Updated this week
- A AI general-purpose state-space search engine, validated first on autonomous penetration testing.☆2,029Updated this week
- 微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。☆358Apr 3, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Helping AI Agent become an awesome practical hacker!☆1,400Jun 16, 2026Updated last month
- 收集整理渗透测试、漏洞扫描、代码审计、CTF、逆向、安全研究 等网络安全相关的 Skills和MCP☆723Jul 6, 2026Updated last week
- 🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sink…☆788Mar 14, 2026Updated 4 months ago
- 🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自 ARL 经典版，升级为 Puppeteer + Nuclei 引擎，打通“天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描➔ 威胁情报追踪”全链路。Vue3 + Flask + Celery 架构，Docker …☆218Updated this week
- 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。☆998Updated this week
- Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析☆139Mar 20, 2026Updated 3 months ago
- 一款用于网页敏感信息检测，指纹识别的chrome插件☆889Jan 13, 2026Updated 6 months ago
- ☆258Mar 31, 2026Updated 3 months ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆236Jun 5, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 智能渗透Agent Manager/Observer/Solver 多角色架构，基于 pi-mono SDK。☆434May 6, 2026Updated 2 months ago
- AutoFuzz是一款安全测试的辅助型BurpSuite插件，主要用于自动识别请求中的参数，根据预设的payload逐个发包测试，从而提高测试效率。☆116Jun 2, 2025Updated last year
- 致命精准的红队作战兵器。模块化集成资产发现、漏扫与利用，重新定义渗透测试工作流 (Workflow) 的新一代安全平台。☆388Jun 29, 2026Updated 3 weeks ago
- 二开xiasql☆68Jan 8, 2026Updated 6 months ago
- OneScan 是一款用于递归目录扫描的 BurpSuite 插件☆1,253Jun 24, 2025Updated last year
- SecKnowledge - Web与AI安全测试知识技能☆323Jun 17, 2026Updated last month
- 备份的漏洞库，3月开始我们来维护☆2,090Jul 13, 2026Updated last week
- 移动安全漏洞挖掘专家SKILL，基于 HackerOne 真实报告的移动安全漏洞挖掘知识库，提供 Android 和 iOS 应用的漏洞挖掘手法、技术细节和代码模式分析。☆177Apr 19, 2026Updated 3 months ago
- FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用☆1,234Jul 12, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JavaScript Reverse Tools -- JS逆向工具☆2,034Jun 16, 2026Updated last month
- 让fscan再次伟大☆357Jun 18, 2026Updated last month
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,299May 10, 2026Updated 2 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆375Mar 25, 2026Updated 3 months ago
- 腾讯云智能渗透黑客松 Official repository of Tencent Cloud Intelligent Penetration Hackathon. Showcasing top open-source projects of LLM-based auton…☆707Updated this week
- wooyun-legacy skill for claude code☆1,742Updated this week
- 目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查☆266Aug 16, 2025Updated 11 months ago
- 从流量包匹配敏感信息的工具-可用作bp、浏览器的下游代理。0感知、无卡顿，支持https。☆298May 1, 2026Updated 2 months ago
- SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入 漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。☆272Feb 6, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 实战沉淀字典☆1,574Mar 17, 2026Updated 4 months ago
- CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！☆1,510May 25, 2026Updated last month
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching. 精准匹配，智能替换！☆370Jun 28, 2026Updated 3 weeks ago
- AI 驱动的后渗透综合管理平台，深度集成 LLM Agent，开箱即用。☆256Updated this week
- 面向 Claude Code 的专业渗透测试技能模块。严格遵循 PTES 标准，覆盖信息收集、漏洞利用、后渗透与免杀规避全阶段。不定期更新skill，以达到优化skill。☆187Jun 5, 2026Updated last month
- 利用代理驱动绕过JDBC Attack检测☆146Jun 15, 2025Updated last year
- AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty☆197Updated this week