致命精准的红队作战兵器。模块化集成资产发现、漏扫与利用，重新定义渗透测试工作流 (Workflow) 的新一代安全平台。
☆397Jun 29, 2026Updated last month
Alternatives and similar repositories for Venom
Users that are interested in Venom are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一款用于网页敏感信息检测，指纹识别的chrome插件☆898Jan 13, 2026Updated 6 months ago
- 一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload☆624Dec 24, 2025Updated 7 months ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,311May 10, 2026Updated 3 months ago
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching. 精准匹配，智能替换！☆373Jun 28, 2026Updated last month
- 红队浏览器插件-检测VUE站点未授权漏洞☆912May 7, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Nuclei POC 管理与漏洞验证工具-Nuclei GUI☆553Apr 24, 2026Updated 3 months ago
- 微信小程序辅助渗透-自动化☆2,201May 26, 2026Updated 2 months ago
- SQL Injection Scout 是一个用于 Burp Suite 的扩展，专为帮助安全研究人员和开发人员检测和分析 SQL 注入漏洞而设计。该扩展提供了丰富的配置选项和直观的用户界面，便于用户自定义扫描和分析过程。☆279Feb 6, 2026Updated 6 months ago
- Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestratio…☆635Jul 22, 2026Updated 2 weeks ago
- 专注于代码审计skill，最小化轻量化skill，只负责安全边界。☆993Jun 16, 2026Updated last month
- Burp Suite HTTP traffic monitoring & management extension for security testers☆63Jun 3, 2026Updated 2 months ago
- 网络空间资产测绘、ICP备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。☆1,365May 19, 2026Updated 2 months ago
- Nacos 综合漏洞利用工具☆673Nov 3, 2025Updated 9 months ago
- P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步☆454Aug 5, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Hengge team develops JavaScript specifically for loading Webpack for batch reading☆321Jun 11, 2026Updated last month
- 一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆4,144Updated this week
- Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率☆821Feb 26, 2026Updated 5 months ago
- 一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。☆678Mar 20, 2026Updated 4 months ago
- JavaScript Reverse Tools -- JS逆向工具☆2,085Jun 16, 2026Updated last month
- 辅助甲方安全人员巡检网站资产，发现并分析API安全问题☆535Jan 20, 2025Updated last year
- ☆197Mar 31, 2026Updated 4 months ago
- 指纹识别、目录扫描，支持主动和被动☆176Jun 29, 2026Updated last month
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆50Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- AutoFuzz是一款安全测试的辅助型BurpSuite插件，主要用于自动识别请求中的参数，根据预设的payload逐个发包测试，从而提高测试效率。☆115Jun 2, 2025Updated last year
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆215Apr 11, 2026Updated 3 months ago
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,570Updated this week
- 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。☆1,042Jul 31, 2026Updated last week
- Lightning-fast internal network scanner☆1,189May 24, 2026Updated 2 months ago
- Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。☆163Apr 3, 2025Updated last year
- FLUX 是一款专业的Web安全扫描工具，JS敏感信息收集、API端点提取、API文档解析、页面爬取、子域名发现、漏洞测试、WAF检测与绕过、JS代码分析等功能。☆223May 6, 2026Updated 3 months ago
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个 攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆596May 24, 2026Updated 2 months ago
- ☆266Mar 31, 2026Updated 4 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript☆489Jul 16, 2026Updated 3 weeks ago
- Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligen…☆117Jan 13, 2026Updated 6 months ago
- Onyx 是一款安全测试工具集，集合多种渗透测试常用的功能和工具，赋能攻防、渗透等场景。整合空间测绘、漏洞扫描、主机探测、信息收集、小程序反编译等能力，提供一站式的渗透测试工作台，告别需要到处切换工具、网站的麻烦☆182May 27, 2026Updated 2 months ago
- 一款java漏洞集合工具☆1,142Jan 13, 2026Updated 6 months ago
- PHP-Code-Audit-Skill是一个专注于PHP代码审计的Skill☆386Mar 25, 2026Updated 4 months ago
- MPET (Multi-Protocol Exploitation Toolkit) 是一款专业的多协议安全测试工具，基于 Wails 框架构建的现代化桌面应用。它提供了对 25+ 种主流服务协议的连接测试、未授权访问检测、弱口令检测和漏洞利用能力，是安全研究人员和渗透测试…☆221Jan 22, 2026Updated 6 months ago
- LingJing 新一代本地桌面级网络安全靶场(支持Mac arm64、Windows amd64)，能在 Mac M 系列芯片设备上启动 AMD64 架构靶机☆519Jun 2, 2026Updated 2 months ago