guchangan1/CodeVulnScan external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

guchangan1/CodeVulnScan

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/guchangan1/CodeVulnScan)

Close

guchangan1 / CodeVulnScanView on GitHubMore

• External links
• Readme badge

CodeVulnScan 是一款基于正则表达式的代码安全审计工具，专为红队成员快速定位sink设计。它能够快速扫描目标代码库，定位潜在的漏洞 Sink 点，提升代码审计效率。

☆61Feb 11, 2026Updated 2 weeks ago

Alternatives and similar repositories for CodeVulnScan

Users that are interested in CodeVulnScan are comparing it to the libraries listed below

• Secur1ty0 / Idregex

  View on GitHub
  IP域名提取工具
  ☆18Jul 2, 2025Updated 8 months ago
• CafeD1 / Kill_Memshell

  View on GitHub
  基于 Agent + Instrumentation + ASM 的 Java 进程内存马检测与清除查杀工具（含 GUI）+CLI命令行操作功能
  ☆39Oct 27, 2025Updated 4 months ago
• XTeam-Wing / httpx

  View on GitHub
  ☆42Feb 19, 2026Updated last week
• Tr0e / JavaSinkTracer

  View on GitHub
  基于Python javalang库开发的一款轻量级Java源代码审计工具，by Tr0e
  ☆71Oct 23, 2025Updated 4 months ago
• XF-FS / RVScan

  View on GitHub
  RVScan 是一个功能强大的 Burp Suite 扩展插件，专为自动化Web应用程序安全测试和漏洞扫描而设计。它提供全面的路径发现、绕过技术、EHole指纹识别和可定制的扫描规则。
  ☆182Dec 4, 2025Updated 2 months ago
• guchangan1 / SyntaxFinger

  View on GitHub
  本工具不去主动的做端口扫描，通过聚合了三大资产测绘引擎接口语法，快速获取与目标有关的所有资产列表，并进行一键指纹识别（通用系统指纹、ICP归属等），筛出高价值及脆弱资产。
  ☆31Mar 13, 2025Updated 11 months ago
• zihe-debug / GodEyesV0.2.0

  View on GitHub
  开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。
  ☆43Jan 17, 2026Updated last month
• YanC1e / ecology9_sqli

  View on GitHub
  本工具用于批量检测泛微E-cology9中/js/hrm/getdata.jsp接口存在的 SQL 注入漏洞（DVB-2025-9428/QVD-2025-23834）
  ☆27Jun 24, 2025Updated 8 months ago
• zero-typora / LinuxScan

  View on GitHub
  ☆14Mar 21, 2024Updated last year
• TFour123 / screen_get

  View on GitHub
  批量获取攻防资产访问截图
  ☆34Apr 17, 2025Updated 10 months ago
• b3nguang / ProxyCat-Go

  View on GitHub
  ProxyCat 的 Golang 重构版本
  ☆14Aug 29, 2024Updated last year
• QdghJ / burpsuite-bchecks

  View on GitHub
  bchecks for burpsuite
  ☆14Oct 9, 2023Updated 2 years ago
• randorisec / decrypt-fortigate-rootfs

  View on GitHub
  ☆22Feb 21, 2025Updated last year
• BKLockly / CLoader

  View on GitHub
  Shellcode Loader / bypass *60、*rong
  ☆16Dec 1, 2023Updated 2 years ago
• Asura88 / deleteUserRequestInfoByXml

  View on GitHub
  ☆13Jul 22, 2023Updated 2 years ago
• saltyfishyu / wscan-Fingerprint

  View on GitHub
  wscan自用指纹库
  ☆12May 24, 2024Updated last year
• Jumbo-WJB / portreuse

  View on GitHub
  portreuse reuseport 端口复用
  ☆61Aug 27, 2023Updated 2 years ago
• winezer0 / XiaYue_Pro

  View on GitHub
  Xia_Yue_Plus 瞎越 增强版
  ☆68Aug 20, 2025Updated 6 months ago
• wa1ki0g / xsshelp

  View on GitHub
  一个辅助挖掘xss漏洞的工具
  ☆20May 3, 2023Updated 2 years ago
• Zacarx / AICodeScan

  View on GitHub
  一款基于Zjackky/CodeScan的轻量级匹配Sink点并AI审计的代码审计扫描器
  ☆244Feb 13, 2025Updated last year
• Amulab / advul

  View on GitHub
  ad vulnerability scanner
  ☆74Dec 21, 2023Updated 2 years ago
• yyhuni / xingfinger

  View on GitHub
  XingFinger 是一款高效的 Web 指纹识别工具，基于 chainreactors/fingers 多指纹库聚合引擎，帮助安全人员快速识别目标系统的技术栈。
  ☆29Dec 28, 2025Updated 2 months ago
• TuyaSecurity / SSRF-Auto

  View on GitHub
  Burp-plugin
  ☆17Jul 18, 2024Updated last year
• Saber-CC / Go-NKN-Trojan

  View on GitHub
  A decentralized basic Trojan framework that eliminates C2 mode and is implemented by P2P, the core networking technology of blockchain
  ☆48Apr 7, 2024Updated last year
• polite-007 / Milkyway

  View on GitHub
  一款全方位扫描工具，具备高效的机器探活，端口探活，协议识别，指纹识别，漏洞扫描等功能
  ☆391Sep 13, 2025Updated 5 months ago
• Maikefee / Windows-Persistence-Tool

  View on GitHub
  这个工具实现了您提到的所有Windows权限维持技术，包括IFEO镜像劫持、启动项后门、WMI无文件后门、进程注入、DLL劫持、影子用户等。代码结构清晰，文档完整，适合用于安全研究和教育目的。
  ☆42Aug 19, 2025Updated 6 months ago
• SharpKean / Burp_TLA

  View on GitHub
  Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）
  ☆39Nov 13, 2025Updated 3 months ago
• Xuno1 / Emergency-response-toolset

  View on GitHub
  猫鼠信安应急响应工具包
  ☆47Jan 11, 2024Updated 2 years ago
• MZgoudan / hae-yakit

  View on GitHub
  蜜汁狗蛋yyds
  ☆28Feb 18, 2025Updated last year
• Arcueld / schtasks

  View on GitHub
  create schtasks bypass AV
  ☆23Jul 14, 2024Updated last year
• onewinner / POCS

  View on GitHub
  收集最新漏洞POC（Yaml\Python）
  ☆218Aug 19, 2025Updated 6 months ago
• Claradoll / Security_Learning

  View on GitHub
  ☆22Dec 5, 2022Updated 3 years ago
• vpxuser / proxy

  View on GitHub
  中间人攻击代理工具，目前已实现端口复用HTTP、SOCKS5协议的透明代理，HTTP、TLS中间人攻击
  ☆28Jan 21, 2026Updated last month
• GaoYuCan / IDAPlugins

  View on GitHub
  个人使用的 IDA Pro Plugins 集合
  ☆40Jan 20, 2026Updated last month
• howmp / reality

  View on GitHub
  grs内网穿透工具通过reality协议隐藏特征
  ☆610Dec 4, 2025Updated 2 months ago
• 9bie / manager

  View on GitHub
  BIE的HMP的B/S端的遠控
  ☆20Jun 25, 2021Updated 4 years ago
• KPF888 / Starmark

  View on GitHub
  红队信息收集工具
  ☆26Jul 5, 2025Updated 7 months ago
• ttstormxx / lineadd

  View on GitHub
  lineadd 渗透测试字典管理工具, 让字典管理生活轻松一点。Penetration test dictionary management tool, make dictionary management life a little easier.
  ☆27Aug 19, 2023Updated 2 years ago
• howmp / iisproxy

  View on GitHub
  通过websocket在IIS8(Windows Server 2012)以上实现socks5代理
  ☆111Jan 26, 2024Updated 2 years ago