瞎越是一款 Burp Suite 的安全插件，主要用于测试 Web 越权、未授权的网络安全漏洞。
☆11Jun 13, 2024Updated 2 years ago
Alternatives and similar repositories for xia_Yue
Users that are interested in xia_Yue are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 收集一些有意思的蓝队项目☆23Jun 14, 2024Updated 2 years ago
- 一款支持检测web应用程序未授权访问缺陷的burp suite插件，可自定义配置检测字段以及返回包json数据分析☆13Apr 22, 2024Updated 2 years ago
- 扫描域名spf邮箱伪造漏洞☆21Nov 10, 2025Updated 10 months ago
- sf is an efficient subdomain brute-forcing tool☆16Oct 13, 2023Updated 2 years ago
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 多人协同信息安全渗透测试报告编写/导出平台☆26Jun 18, 2024Updated 2 years ago
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated 2 years ago
- Whale-ApiUse是burp插件，可以用来测试wx公众号，微信小程序，钉钉，企业微信等的接口，通过输入key和secret进行测试，之所以做这个首先这是一个练手项目，后续也会继续维护更新，如果有好的建议欢迎留言。其次由于现有的工具都要额外下载，用起来繁琐，所以我想着通…☆14Jan 7, 2024Updated 2 years ago
- 前端未授权访问检测工具，自动提取JS泄露的接口进行测试。☆35Aug 25, 2023Updated 3 years ago
- 泛查询漏洞扫描Burp插件☆29Jun 26, 2026Updated 2 months ago
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆17Aug 25, 2025Updated last year
- ☆20Feb 27, 2022Updated 4 years ago
- 用于爬取谷歌关键词搜索的url，便于红队，src等快速提取☆34May 21, 2024Updated 2 years ago
- 申明：仅供教学演示，禁用非法、未授权等进行钓鱼，后果自负。☆13May 21, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新☆149Apr 24, 2024Updated 2 years ago
- TL-Rustscan是由天禄实验室开发的一款基于 Rust 编写的高性能、高并发端口扫描命令行工具。专 为攻防演练、资产摸排和渗透测试设计，旨在提供快速、稳定且易于集成的端口探测能力。☆44Dec 7, 2025Updated 9 months ago
- CTF常用python脚本☆15May 24, 2024Updated 2 years ago
- Godzilla4.01 decompile code☆28Feb 15, 2022Updated 4 years ago
- 快速筛选Enscan输出结果中的domain，让你在红蓝攻防中快人一步☆29Aug 13, 2025Updated last year
- 一款自动化进行googledork的工具，帮助测试人员迅速进行敏感信息收集☆12Apr 13, 2024Updated 2 years ago
- BurpSuite extensions -Bypass Suite☆26Jul 19, 2024Updated 2 years ago
- SpringbootGuiExploit漏洞利用工具测试版☆20Jun 7, 2024Updated 2 years ago
- ☆112Mar 6, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An automated discovery and probing tool for Swagger / Knife4j / OpenAPI API documentation.☆131May 25, 2026Updated 3 months ago
- burp越权测试插件☆21Sep 3, 2026Updated 2 weeks ago
- ☆29Dec 6, 2024Updated last year
- XSS-Detector是一款基于多线程并发架构的Burp Suite扩展插件，通过精确请求-响应映射机制高效检测Web应用中的XSS漏洞。☆27Apr 27, 2025Updated last year
- python版批量漏洞扫描，poc大部分来源网络，长期更新，也可自行扩展。☆26Jul 24, 2024Updated 2 years ago
- WxappRevealer 是一款跨平台、独立可执行的命令行工具，专注于对 WeChat 小程序（`.wxapkg`）的智能反编译与敏感信息检索☆29Dec 12, 2025Updated 9 months ago
- ShellCode_Loader - CobaltStrike免杀ShellCode加载器、免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender，请参考博客 https://www.vpss.cc/471.html☆53Apr 2, 2024Updated 2 years ago
- Burp的JS API接口过滤插件☆126Dec 27, 2023Updated 2 years ago
- 红队必备，场景：在爆破批量封ip的情况下，爬取socks5代理在bp进行渗透测试。说明：可设置一个请求换一次socks代理ip，这样就绕过了封ip的情况。☆38Jun 28, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 一个既可主动，又可被动提取链接的burp插件☆47Mar 29, 2024Updated 2 years ago
- 一款针对Spring框架的漏洞扫描及漏洞利用图形化工具☆236Jun 13, 2026Updated 3 months ago
- 具有普适性的AI化自动渗透测试系统☆37Aug 18, 2026Updated last month
- HiddenDomainHunter☆20Apr 15, 2023Updated 3 years ago
- 通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。☆122Dec 27, 2024Updated last year
- 漏洞扫描poc，不定期更新☆40May 26, 2024Updated 2 years ago
- 一个重庆高校在线开放课程平台自动化工具包。☆13Updated this week