js主动参数提取与构造工具
☆97Dec 22, 2025Updated 4 months ago
Alternatives and similar repositories for ParamX
Users that are interested in ParamX are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于提取Webpack打包的未加载的JavaScript文件，并扫描这些文件以查找敏感信息。☆40Sep 17, 2025Updated 7 months ago
- adb未授权管理☆40Feb 24, 2026Updated 2 months ago
- URLReplayer是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。☆41Jan 15, 2026Updated 3 months ago
- 一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。☆13Mar 7, 2025Updated last year
- MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching.☆336Mar 24, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 对指定目录下进行敏感信息检索☆15Feb 14, 2025Updated last year
- chrome和edge查看exif有效信息的插件☆12Mar 3, 2025Updated last year
- 开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。☆72Jan 17, 2026Updated 3 months ago
- 本工具不去主动的做端口扫描，通过聚合了三大资产测绘引擎接口语法，快速获取与目标有关的所有资产列表，并进行一键指纹识别（通用系统指纹、ICP归属等），筛出高价值及脆弱资产。☆31Mar 13, 2025Updated last year
- hessian反序列化利用工具☆40Apr 11, 2026Updated 2 weeks ago
- ☆43Sep 8, 2025Updated 7 months ago
- ☆239Mar 31, 2026Updated 3 weeks ago
- ☆48Sep 30, 2025Updated 7 months ago
- JeecgBoot综合漏洞利用工具版本更新☆18Feb 18, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- XSS-Detector是一款基于多线程并发架构的Burp Suite扩展插件，通过精确请求-响 应映射机制高效检测Web应用中的XSS漏洞。☆26Apr 27, 2025Updated last year
- 红队浏览器插件-检测VUE站点未授权漏洞☆766Sep 9, 2025Updated 7 months ago
- JeecgBoot Go版本综合漏洞检测工具☆87Feb 24, 2026Updated 2 months ago
- 网络空间资产测绘、ICP备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。☆1,280Updated this week
- Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestratio…☆522Updated this week
- ☆76Sep 10, 2025Updated 7 months ago
- ☆13Aug 13, 2024Updated last year
- Shiro反序列化漏洞一站式综合利用工具☆152Jan 22, 2026Updated 3 months ago
- 在ShiroAttack2基础上增加 Header 长度绕过、分块、短 Payload等功能☆85Apr 14, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Vue 路由提取同时去除权限校验☆128Apr 15, 2026Updated 2 weeks ago
- 漏洞挖掘小工具，用于发现页面中的隐藏可点击元素☆84Jun 4, 2025Updated 10 months ago
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆163Jul 8, 2025Updated 9 months ago
- JSFindAPI是一款自动从html页面中获取js链接，并自动访问js提取js中的api路径，然后自动进行api未授权测试的插件，同时也可被动监听，当访问js时自动提取api进行访问，提取api接口主要根据AJAX，XMLHttpRequest，axios，Vue.js等…☆33Oct 20, 2025Updated 6 months ago
- WannaCry_HTA 是一个基于 HTA（HTML Application）技术开发的高度仿真 WannaCry 勒索病毒界面模拟程序。该项目简单、完全可控，专为安全研究、应急演练和安全教育场景设计。界面UI参考zR00t1师傅项目编写。☆25Aug 13, 2025Updated 8 months ago
- 通过Whois信息发现更多与目标有关联的域名，扩大攻击面☆14Mar 9, 2022Updated 4 years ago
- GalaxyHttpHooker☆45Jul 31, 2025Updated 8 months ago
- 浏览器存储桶配置漏洞检测插件☆252Nov 27, 2025Updated 5 months ago
- 一个批量请求工具☆43Dec 14, 2025Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- autoxss Million dollars Google AND Firefox plugin☆49Mar 26, 2025Updated last year
- ☆19Jan 25, 2024Updated 2 years ago
- GYscan是一款基于Go语言开发的现代化综合渗透测试工具，专为安全研究人员、渗透测试工程师和红队成员设计。项目采用模块化架构，包含C2服务器端和客户端组件，支持Windows和Linux平台，提供系统安全分析和漏洞扫描功能。☆78Apr 15, 2026Updated 2 weeks ago
- 针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …☆285Aug 12, 2025Updated 8 months ago
- CryptoJS常规加解密自吐密钥、加解密方式，快速定位加解密位置(无视混淆)。SRC和常规渗透神器☆608Jan 21, 2026Updated 3 months ago
- Parsing 是一个 Chrome 插件，选择ai分析当前页面的Js代码，内置提示词，不再需要单拎js。以及信息收集功能，提升渗透测试效率。☆57Jan 28, 2026Updated 3 months ago
- 一款Google信息收集插件，包含域名，map，js等文件提取☆24Apr 5, 2025Updated last year