一款面向SRC漏洞挖掘中，页面信息收集场景的浏览器扩展，自动收集页面及相关资源中的敏感信息与可疑线索，支持基础扫描、深度递归扫描、批量 API 测试及结果导出与自定义正则配置
☆631Mar 22, 2026Updated 2 months ago
Alternatives and similar repositories for Phantom
Users that are interested in Phantom are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 浏览器存储桶配置漏洞检测插件☆265Nov 27, 2025Updated 6 months ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆183Apr 17, 2024Updated 2 years ago
- 网络空间资产测绘、ICP 备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。☆1,317May 19, 2026Updated 3 weeks ago
- 一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆3,611Updated this week
- AutoFuzz是一款安全测试的辅助型BurpSuite插件，主要用于自动识别请求中的参数，根据预设的payload逐个发包测试，从而提高测试效率。☆117Jun 2, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- jeecg综合漏洞利用工具☆443Aug 30, 2024Updated last year
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆1,509Apr 26, 2026Updated last month
- 一款用于网页敏感信息检测，指纹识别的chrome插件☆835Jan 13, 2026Updated 4 months ago
- Nacos Derby命令执行漏洞利用脚本☆151Apr 7, 2025Updated last year
- JDumpSpiderGUI 是一个用于 Java 堆转储文件分析的工具，支持命令行和 JavaFX 图形界面两种模式。该工具主要是在原工具上添加了图形化的界面☆164May 5, 2025Updated last year
- CryptoJS常规加解密自吐密钥、加解密方式，快速定位加解密位置(无视混淆)。SRC和常规渗透神器☆613Jan 21, 2026Updated 4 months ago
- EZ是一款集信息收集、端口扫描、服务暴破、URL爬虫、指纹识别、被动扫描为一体的跨平台漏洞扫描器。☆1,053Jan 17, 2025Updated last year
- Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率☆810Feb 26, 2026Updated 3 months ago
- Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。☆165Apr 3, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload☆612Dec 24, 2025Updated 5 months ago
- 一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。☆676Mar 20, 2026Updated 2 months ago
- Nacos 综合漏洞利用工具☆637Nov 3, 2025Updated 7 months ago
- 目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查☆259Aug 16, 2025Updated 9 months ago
- 综合后渗透方面的杂烩☆594Mar 1, 2026Updated 3 months ago
- 获取 alibaba druid 一些 sessions , sql , urls☆325Apr 4, 2025Updated last year
- Burp插件，自动化挖掘SSRF，Redirect，Sqli漏洞，自定义匹配参数☆480Sep 10, 2023Updated 2 years ago
- Burp suite 短信轰炸辅助绕过插件☆390May 25, 2026Updated 2 weeks ago
- 坤坤CS 基于CobaltStrike cat 4.5二开项目 添加反沙箱、反测绘。集成常用后渗透插件，开箱即用☆276Apr 18, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 利用各个大模型，自动化生成绕过WAF的burp插件☆185Mar 13, 2025Updated last year
- MDUT-Extend(扩展版本)☆925Mar 27, 2026Updated 2 months ago
- 后渗透信息/密码/凭证收集工具☆299May 7, 2025Updated last year
- CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察，智探千方！☆1,497May 25, 2026Updated 2 weeks ago
- 新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell☆680Jun 2, 2026Updated last week
- SwaggerGan☆106Nov 18, 2025Updated 6 months ago
- P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步☆452Aug 5, 2025Updated 10 months ago
- 一款针对Spring框架的漏洞扫描及漏洞利用图形化工具☆226Mar 4, 2025Updated last year
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,887Aug 2, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件☆377Jun 7, 2024Updated 2 years ago
- Java Vulnerability Exploitation Platform☆2,077Apr 29, 2026Updated last month
- tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含☆291Apr 6, 2025Updated last year
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆174Oct 8, 2024Updated last year
- CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现☆43Updated this week
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆571Apr 3, 2026Updated 2 months ago
- sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！☆713Jan 21, 2025Updated last year