SkewwG/BurpExtender external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

SkewwG/BurpExtender

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/SkewwG/BurpExtender)

Close

SkewwG / BurpExtenderView on GitHubMore

• External links
• Readme badge

Burp suite 的插件集合

☆241Mar 13, 2021Updated 5 years ago

Alternatives and similar repositories for BurpExtender

Users that are interested in BurpExtender are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• dongfangyuxiao / BurpExtend

  View on GitHub
  基于Burp插件开发打造渗透测试自动化
  ☆417Dec 7, 2021Updated 4 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆775Jan 26, 2022Updated 4 years ago
• Acmesec / Sylas

  View on GitHub
  新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool
  ☆496Oct 9, 2022Updated 4 years ago
• bufsnake / blueming

  View on GitHub
  备份文件扫描，并自动进行下载
  ☆128Jul 26, 2023Updated 3 years ago
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,030Jan 3, 2025Updated last year
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• SummerSec / SpringBootExploit

  View on GitHub
  项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。
  ☆1,889Jan 15, 2024Updated 2 years ago
• safe6Sec / command

  View on GitHub
  红队常用命令速查
  ☆1,028Mar 17, 2026Updated 7 months ago
• Goqi / Banli

  View on GitHub
  Banli-高危资产识别和高危漏洞扫描
  ☆455Apr 10, 2023Updated 3 years ago
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆446Jun 14, 2022Updated 4 years ago
• NeoTheCapt / PowerScanner

  View on GitHub
  面向HW的红队半自动扫描器
  ☆226Dec 16, 2021Updated 4 years ago
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆738Sep 9, 2024Updated 2 years ago
• f0ng / poc2jar

  View on GitHub
  Java编写，Python作为辅助依赖的漏洞验证、利用工具，添加了进程查找模块、编码模块、命令模块、常见漏洞利用GUI模块、shiro rememberMe解密模块，加快测试效率
  ☆757Feb 25, 2024Updated 2 years ago
• ffffffff0x / Pentest101

  View on GitHub
  一些关于渗透测试的Tips
  ☆608Dec 19, 2022Updated 3 years ago
• pmiaowu / HostCollision

  View on GitHub
  用于host碰撞而生的小工具,专门检测渗透中需要绑定hosts才能访问的主机或内部系统
  ☆692Jun 13, 2024Updated 2 years ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,014May 21, 2024Updated 2 years ago
• c0ny1 / passive-scan-client

  View on GitHub
  Burp被动扫描流量转发插件
  ☆1,461Jun 17, 2024Updated 2 years ago
• zongdeiqianxing / Autoscanner

  View on GitHub
  输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等
  ☆809Mar 13, 2024Updated 2 years ago
• SkewwG / domainTools

  View on GitHub
  内网域渗透小工具
  ☆732Apr 20, 2021Updated 5 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆447Jun 19, 2024Updated 2 years ago
• broken5 / WebAliveScan

  View on GitHub
  对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描
  ☆903Dec 8, 2022Updated 3 years ago
• a1phaboy / FastjsonScan

  View on GitHub
  Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
  ☆1,054Oct 7, 2022Updated 4 years ago
• Ryze-T / Sylas

  View on GitHub
  数据库综合利用工具
  ☆544Feb 16, 2022Updated 4 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,257Oct 1, 2022Updated 4 years ago
• Proton VPN Special Offer - Get 70% off • Ad
  Special partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
• zilong3033 / fastjsonScan

  View on GitHub
  fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。
  ☆126May 14, 2021Updated 5 years ago
• ybdt / RuiningLoader

  View on GitHub
  An AdaptixC2 Loader with Advanced Evasion, Such as Phantom DLL Hollowing | Stack Spoof | Sleep Mask | CFG Bypass | CET Bypass
  ☆942Oct 11, 2026Updated 3 weeks ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆631Apr 4, 2021Updated 5 years ago
• s7ckTeam / Glass

  View on GitHub
  Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。
  ☆1,008Jan 26, 2022Updated 4 years ago
• dr0op / bufferfly

  View on GitHub
  攻防演习/渗透测试资产处理小工具，对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。
  ☆631Jun 19, 2024Updated 2 years ago
• sp4zcmd / WeblogicExploit-GUI

  View on GitHub
  Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行
  ☆790Apr 20, 2022Updated 4 years ago
• whwlsfb / Log4j2Scan

  View on GitHub
  Log4j2 RCE Passive Scanner plugin for BurpSuite
  ☆833Aug 4, 2023Updated 3 years ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,862Oct 20, 2023Updated 3 years ago
• UzJu / Cloud-Bucket-Leak-Detection-Tools

  View on GitHub
  六大云存储，泄露利用检测工具
  ☆1,266Mar 28, 2025Updated last year
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• F6JO / RouteVulScan

  View on GitHub
  Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件
  ☆1,335Jul 10, 2026Updated 3 months ago
• 0x727 / ShuiYing_0x727

  View on GitHub
  检测域环境内，域机器的本地管理组成员是否存在弱口令和通用口令，对域用户的权限分配以及域内委派查询
  ☆356Aug 10, 2021Updated 5 years ago
• sairson / MateuszEx

  View on GitHub
  bypass AV生成工具,目前免杀效果不是很好了，但是过个360，火绒啥的没问题
  ☆105Nov 7, 2021Updated 4 years ago
• SafeGroceryStore / Caesar

  View on GitHub
  一个全新的敏感文件发现工具
  ☆270Jan 5, 2021Updated 5 years ago
• wgpsec / DBJ

  View on GitHub
  大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）
  ☆914Feb 8, 2022Updated 4 years ago
• whwlsfb / JDumpSpider

  View on GitHub
  HeapDump敏感信息提取工具
  ☆1,701Aug 20, 2026Updated 2 months ago
• A-D-Team / grafanaExp

  View on GitHub
  A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key …
  ☆270Oct 17, 2025Updated last year