BurpSuite 被动指纹识别 / Favicon Hash / 递归目录扫描 / 路径收集 一体化插件
☆29Jul 16, 2026Updated 2 weeks ago
Alternatives and similar repositories for FingerScan
Users that are interested in FingerScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OA系统解密小工具☆47Dec 10, 2023Updated 2 years ago
- YYScan是一款Golang编写的模块化工具，速度很奈斯，主要功能有端口扫描、网站title识别、网站指纹识别、ssh暴力破解、mysql暴力破解。☆35Oct 18, 2021Updated 4 years ago
- ☆26Jul 2, 2026Updated last month
- hessian反序列化利用工具☆41Apr 11, 2026Updated 3 months ago
- Burpsuite验证码DOS攻击插件。☆21Oct 24, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 通过ptr记录使用ip反查内网域名☆16Sep 10, 2024Updated last year
- XSS-Detector是一款基于多线程并发架构的Burp Suite扩展插件，通过精确请求-响应映射机制高效检测Web应用中的XSS漏洞。☆26Apr 27, 2025Updated last year
- AutoFuzz是一款安全测试的辅助型BurpSuite插件，主要用于自动识别请求中的参数，根据预设的payload逐个发包测试，从而提高测试效率。☆115Jun 2, 2025Updated last year
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件☆377Jun 7, 2024Updated 2 years ago
- 基于 Burp Montoya API 开发的全能插件，集成自动化HTTP加解密、高危漏洞扫描（Fastjson/Log4j/Shiro/Spring未授权）与安全工具联动（sqlmap/xray），支持 Burp Collaborator 与 CEYE DNSLog，专为…☆43Jun 11, 2026Updated last month
- Finger 是一款专为 Burp Suite 打造的模块化指纹识别插件，旨在通过被动流量监控与智能主动探测，快速识别目标站点的技术栈（CMS、框架、中间件、API 接口及敏感路径泄露）☆30Apr 13, 2026Updated 3 months ago
- 前端信息收集与 DOMXSS 审计工作台☆28Mar 27, 2026Updated 4 months ago
- ASP.net ViewState密钥被动扫描爆破BurpSuite插件☆237Jun 5, 2026Updated last month
- 用 AI 来操作JYso，并在AI遇到反序列化和JNDI注入情况自动调用☆28Jun 1, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。☆45Oct 11, 2025Updated 9 months ago
- 泛微oa漏洞利用工具☆257Jan 4, 2023Updated 3 years ago
- burp越权测试插件☆19May 15, 2026Updated 2 months ago
- burp插件,Oss漏洞被动扫描☆115Aug 8, 2025Updated 11 months ago
- ☆18Nov 23, 2023Updated 2 years ago
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆574Apr 3, 2026Updated 4 months ago
- Cobalt Strike插件☆94Jan 13, 2024Updated 2 years ago
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆34Jul 26, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 扫描jboss常见漏洞路径是否存在。☆84Jan 8, 2020Updated 6 years ago
- DBX 数据审计版☆44Updated this week
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆50Updated this week
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆228Jun 8, 2024Updated 2 years ago
- burpsuit插件，解析swagger/openapi接口文档并进行请求，模拟参数方便渗透测试人员快速发现可用接口 (最新使用源码编译，release有时候没空搞)☆46Oct 23, 2025Updated 9 months ago
- 基于 Chrome Manifest V3 的渗透测试辅助插件，用于快速发现页面输入点、评估 CSP 风险、嗅探潜在敏感资产、识别常见前端框架指纹，并内置常用编码转换工具，帮助进行合法合规的渗透测试与安全检查☆75Mar 2, 2026Updated 5 months ago
- js主动参数提取与构造工具☆99Dec 22, 2025Updated 7 months ago
- riverPass 是一个用Go编写的瑞数WAF绕过工具。它利用了WebSocket协议，将请求发送的自身浏览器中，从而绕过了瑞数WAF的检测。☆235Oct 18, 2024Updated last year
- RVScan 是一个功能强大的 Burp Suite 扩展插件，专为自动化Web应用程序安全测试和漏洞扫描而设计。它提供全面的路径发现、绕过技术、EHole指纹识别和可定制的扫描规则。☆203May 6, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- weblogic批量打入内存马，electron+vue3+springboot实现。☆53Mar 13, 2024Updated 2 years ago
- MySQL_Fake_Server-啄木鸟yso适配版☆45Sep 20, 2024Updated last year
- HaE MCP集成是基于 HaE 扩展开发的智能安全分析工具。该工具通过 MCP 协议为 AI 助手提供结构化的敏感信息访问接口，实现自动化的安全数据分析和验证功能。☆21Jan 26, 2026Updated 6 months ago
- ☆11Jul 27, 2023Updated 3 years ago
- 快速测试是否存在FastAdmin框架相关漏洞☆26Oct 14, 2024Updated last year
- 基于 0.zone API 的五合一企业资产信息查询客户端程序☆17Jul 14, 2026Updated 3 weeks ago
- golang写的批量对目标网站进行截图的小工具，适合目标资产比较多时，快速定位薄弱点。☆32Oct 14, 2022Updated 3 years ago