这是一个全面的Web应用安全扫描工具，专注于检测XSS（跨站脚本）漏洞，同时也能够发现其他类型的Web安全漏洞。该工具支持多种扫描模式、不同级别的有效载荷和详细的漏洞报告。
☆19Mar 9, 2025Updated last year
Alternatives and similar repositories for XSS_Scanner
Users that are interested in XSS_Scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- xss漏洞挖掘插件☆36Feb 6, 2025Updated last year
- 这是一个全面的Web应用安全扫描工具，专注于检测XSS（跨站脚本）漏洞，同时也能够发现其他类型的Web安全漏洞。该工具支持多种扫描模式、不同级别的有效载荷和详细的漏洞报告。☆66Mar 13, 2025Updated last year
- SQLMap-FluX 是针对sql注入的改造版本。本项目核心在于通过重构工具的静态特征、逻辑载荷以及交互行为，使其能够模拟拟人化的访问模式，从而在渗透测试中，有效检测并绕过现代Web应用防火墙的特征识别与频率检测。☆48Mar 11, 2026Updated 6 months ago
- ☆14Jan 9, 2026Updated 8 months ago
- My pentest tools used two years ago. Part1☆16May 11, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 瞎注修改版，新增了参数黑名单、返回包列排序、数据包内容自动匹配替换的功能☆27Mar 19, 2025Updated last year
- 一个基于 Tauri + Next.js 构建的现代化风险隐患报告管理与生成应用，专 为网络安全评估、系统安全审计等场景设计。☆20Jun 26, 2025Updated last year
- 一款轻量级 Burp Suite 被动扫描探测SQLi XSS SSTI漏洞插件☆89Mar 18, 2026Updated 5 months ago
- 二开xiasql☆67Jan 8, 2026Updated 8 months ago
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated 2 years ago
- study_summary☆10Aug 8, 2022Updated 4 years ago
- Apple Notes for Android☆14Sep 28, 2024Updated last year
- 基于协程并发的Web敏感文件扫描器，精准探测备份文件、配置泄露及版本控制目录暴露风险，为渗透测试与安全防护提供专业级资产测绘方案。☆12Mar 6, 2025Updated last year
- 递归寻找JS泄露的路径。Recursively search for the paths of JS Files.For pentest☆11Sep 30, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Parsing 是一个 Chrome 插件，选择ai分析当前页面的Js代码，内置提示词，不再需要单拎js。以及信息收集功能，提升渗透测试效率。☆68Jan 28, 2026Updated 7 months ago
- Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）☆39Nov 13, 2025Updated 10 months ago
- ssrf_proxy☆14Jun 9, 2023Updated 3 years ago
- CVE漏洞挖掘 (CVE Vulnerability Hunting), by Tr0e.☆18Jun 21, 2025Updated last year
- Burpsuite插件用于接口路径渗透测试☆46May 11, 2026Updated 4 months ago
- Directory Traversal Scanner 是一个高性能的目录遍历漏洞扫描工具，专门用于检测和验证 Web 应用程序中的路径遍历漏洞。通过异步并发扫描和智能 WAF 绕过技术，帮助安全研究人员快速发现潜在的安全隐患。Directory Traversal Sca…☆33Mar 28, 2025Updated last year
- 子域名收集工具☆18Mar 26, 2025Updated last year
- 一款被动扫描ssrf的burpsuite插件☆20Dec 30, 2022Updated 3 years ago
- Grafanav8.*版本任意文件读取漏洞批量检测工具：该漏洞目前为0day漏洞，未授权的攻击者利用该漏洞，能够获取服务器敏感文件。☆12Dec 23, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 掘地三尺（DigDeep）：覆盖云安全 、小程序、APP、web等常见敏感信息泄露类型，一键挖掘源码中的密码/密钥/手机号/身份证/云服务AK、SK等近百类敏感数据。☆94Apr 12, 2026Updated 5 months ago
- 基于正则表达式的本地文件敏感信息数据挖掘助手。Regular Expression Based Data Mining Assistant for Local File Sensitive Information.☆13Oct 11, 2025Updated 11 months ago
- 一款红队打点助力DDDD神器(POC|workflow|finger|dir管理、自动生成workflow)☆38Apr 27, 2026Updated 4 months ago
- 瞎越是一款 Burp Suite 的安全插件，主要用于测试 Web 越权、未授权的网络安全漏洞。☆11Jun 13, 2024Updated 2 years ago
- 参照xffhelper源码修改，结合了fakeip的功能，生成jar包，不再需要py支持☆14Jun 10, 2021Updated 5 years ago
- Automatically exported from code.google.com/p/sqlifuzzer☆12May 22, 2015Updated 11 years ago
- Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作☆13Aug 9, 2023Updated 3 years ago
- 【Hello-CTF labs】一个流量分析的研究辅助/学习靶场☆48Jul 13, 2025Updated last year
- 扫描域名spf邮箱伪造漏洞☆21Nov 10, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆30Apr 2, 2026Updated 5 months ago
- Burp Suite HTTP traffic monitoring & management extension for security testers☆62Jun 3, 2026Updated 3 months ago
- Copilot for the Linux command line☆17May 19, 2023Updated 3 years ago
- TongWebEJB反序列化漏洞检测工具——Burp插件☆18Apr 26, 2026Updated 4 months ago
- bchecks for burpsuite☆15Oct 9, 2023Updated 2 years ago
- LingXi: multi-agent CTF and pentest framework originated from Tencent Security Hackathon☆38Apr 30, 2026Updated 4 months ago
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated last year