XF-FS/APIKit external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

XF-FS/APIKit

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/XF-FS/APIKit)

Close

XF-FS / APIKitView on GitHubMore

• External links
• Readme badge

APIKit 是Burp Suite 的一个API接口扫描插件，该版本APIKit是对API-Security项目的APIKit1.0进行的二开，增加了扫描开关，避免直接打开burp乱扫被抓起来

☆106Dec 19, 2025Updated 7 months ago

Alternatives and similar repositories for APIKit

Users that are interested in APIKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• XF-FS / RVScan

  View on GitHub
  RVScan 是一个功能强大的 Burp Suite 扩展插件，专为自动化Web应用程序安全测试和漏洞扫描而设计。它提供全面的路径发现、绕过技术、EHole指纹识别和可定制的扫描规则。
  ☆204May 6, 2026Updated 3 months ago
• mumu0215 / api_checker

  View on GitHub
  burpsuit插件，解析swagger/openapi接口文档并进行请求，模拟参数方便渗透测试人员快速发现可用接口 (最新使用源码编译，release有时候没空搞)
  ☆46Oct 23, 2025Updated 9 months ago
• eeeeeeeeee-code / AutoFuzzBurp

  View on GitHub
  各类综合 upload_fuzz,smb_fuzz,tls绕过,被动指纹扫描
  ☆72Jun 6, 2025Updated last year
• Chave0v0 / AutoFuzz

  View on GitHub
  AutoFuzz是一款安全测试的辅助型BurpSuite插件，主要用于自动识别请求中的参数，根据预设的payload逐个发包测试，从而提高测试效率。
  ☆115Jun 2, 2025Updated last year
• saoshao / DetSql

  View on GitHub
  Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率
  ☆821Feb 26, 2026Updated 5 months ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• JaveleyQAQ / SQL-Injection-Scout

  View on GitHub
  SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。
  ☆279Feb 6, 2026Updated 6 months ago
• libaibaia / BucketVulTools

  View on GitHub
  Burpsuite存储桶配置不当漏洞检测插件
  ☆199Jul 16, 2025Updated last year
• lingxisec / ShiroAttack2_bypass

  View on GitHub
  在ShiroAttack2基础上增加 Header 长度绕过、分块、短 Payload等功能
  ☆98Apr 14, 2026Updated 3 months ago
• winezer0 / APIFinderPlus

  View on GitHub
  目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查
  ☆265Aug 16, 2025Updated 11 months ago
• Niiiiko / FastjsonScan4Burp

  View on GitHub
  FastjsonScan4Burp 一款基于burp被动扫描的fastjson漏洞探测插件，可针对数据包中存在json的参数或请求体进行payload测试。旨在帮助安全人员更加便捷的发现、探测、深入利用fastjson漏洞，目前已实现fastjson探测、版本、依赖探测、出…
  ☆174Mar 13, 2025Updated last year
• yhy0 / passive-scan-client

  View on GitHub
  Burp被动扫描流量转发插件
  ☆84Jul 18, 2024Updated 2 years ago
• XF-FS / WebBatchRequestpro

  View on GitHub
  一个批量请求工具
  ☆45Dec 14, 2025Updated 7 months ago
• SickleSec / SnowEyes

  View on GitHub
  一款用于网页敏感信息检测，指纹识别的chrome插件
  ☆898Jan 13, 2026Updated 6 months ago
• Msup5 / JeecgGo

  View on GitHub
  JeecgBoot Go版本综合漏洞检测工具
  ☆103Feb 24, 2026Updated 5 months ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• T3nk0 / Upload_Auto_Fuzz

  View on GitHub
  一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload
  ☆624Dec 24, 2025Updated 7 months ago
• SharpKean / Burp_TLA

  View on GitHub
  Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）
  ☆39Nov 13, 2025Updated 8 months ago
• F6JO / JsRouteScan

  View on GitHub
  Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件
  ☆377Jun 7, 2024Updated 2 years ago
• h00klod0er / xia_Yue_pro

  View on GitHub
  xia_Yue 插件修改版，瞎越修改版，修复中文重放乱码，添加请求行越权测试，一键导出越权url，允许重复url测试等功能
  ☆79Jan 5, 2026Updated 7 months ago
• kN6jq / gatherBurp

  View on GitHub
  一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。
  ☆678Mar 20, 2026Updated 4 months ago
• h00klod0er / xxljob-Hessian-Exp

  View on GitHub
  xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用
  ☆37Dec 31, 2024Updated last year
• Zmz-c / OneScan_Expand

  View on GitHub
  OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST
  ☆50Updated this week
• libaibaia / BucketTool

  View on GitHub
  浏览器存储桶配置漏洞检测插件
  ☆275Nov 27, 2025Updated 8 months ago
• ZFYy1x / auth_analyzer_modify

  View on GitHub
  burp越权测试插件
  ☆19May 15, 2026Updated 2 months ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• F3ank / ApiScanPlus

  View on GitHub
  Burpsuite插件用于接口路径渗透测试
  ☆46May 11, 2026Updated 2 months ago
• youki992 / YonYouNCPocTool

  View on GitHub
  用友NC漏洞批量检测工具，支持POC显示、单一检测、批量检测、结果导出、AI交互等
  ☆46Sep 8, 2025Updated 11 months ago
• z-bool / Venom-JWT

  View on GitHub
  针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …
  ☆289Aug 12, 2025Updated 11 months ago
• r3tree / RouteVulScanPlus

  View on GitHub
  基于RouteVulScanPlus的burp插件更新，增加响应内容自定义正则匹配减少误报
  ☆11May 28, 2025Updated last year
• banchengkemeng / Auto-SSRF

  View on GitHub
  基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件
  ☆179Mar 2, 2025Updated last year
• 7uup / TsojanScan-Plus

  View on GitHub
  TsoJanScan Burp Plugins Secondary Development
  ☆103Jan 15, 2026Updated 6 months ago
• hookdd / OssScan

  View on GitHub
  burp插件,Oss漏洞被动扫描
  ☆115Aug 8, 2025Updated last year
• CllmsyK / YYBaby-Spring_Scan

  View on GitHub
  一款针对Spring框架的漏洞扫描及漏洞利用图形化工具
  ☆236Jun 13, 2026Updated last month
• shuanx / BurpFingerPrint

  View on GitHub
  BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件
  ☆766Sep 5, 2024Updated last year
• Bare Metal GPUs on DigitalOcean Gradient AI • Ad
  Purpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
• Ernket / xia_sql_modify

  View on GitHub
  瞎注修改版，新增了参数黑名单、返回包列排序、数据包内容自动匹配替换的功能
  ☆27Mar 19, 2025Updated last year
• sma11new / Pyke-Shiro

  View on GitHub
  复杂请求下的Shiro反序列化利用工具
  ☆422Mar 12, 2024Updated 2 years ago
• 24-2021 / Finger24

  View on GitHub
  基于已收集指纹库进行识别网站指纹的浏览器插件
  ☆121Jul 30, 2025Updated last year
• Chave0v0 / ShiroAttack2_Pro

  View on GitHub
  Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。
  ☆163Apr 3, 2025Updated last year
• Di-duo / HostAttack

  View on GitHub
  一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。
  ☆13Mar 7, 2025Updated last year
• ther0ok1eboy / CaptchaDos

  View on GitHub
  Burpsuite验证码DOS攻击插件。
  ☆21Oct 24, 2024Updated last year
• Lotus6 / JavaGadgetGenerator

  View on GitHub
  JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...
  ☆576Apr 3, 2026Updated 4 months ago