JSFindAPI是一款自动从html页面中获取js链接，并自动访问js提取js中的api路径，然后自动进行api未授权测试的插件，同时也可被动监听，当访问js时自动提取api进行访问，提取api接口主要根据AJAX，XMLHttpRequest，axios，Vue.js等各种api请求的写法去正则提取，准确性和数量都有提升
☆34Oct 20, 2025Updated 9 months ago
Alternatives and similar repositories for JSFindAPI
Users that are interested in JSFindAPI are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- xia_Yue 插件修改版，瞎越修改版，修复中文重放乱码，添加请求行越权测试，一键导出越权url，允许重复url测试等功能☆79Jan 5, 2026Updated 6 months ago
- xxljob-Hessian-Exp 一款XXL-JOB <=2.0.1 Hessian反序列化图形化利用工具，可不出网利用☆37Dec 31, 2024Updated last year
- FOCI Toolkit 是一款集资产扫描、漏洞验证与ICP备案查询于一体的自动化安全分析工具，专为技术团队和安全研究人员设计。通过集成 FOFA 资产批量查询、POC 漏洞验证以及 ICP 备案合规性检查三大核心模块，FOCI Toolkit 提供了从资产发现到风险评估的…☆18Feb 27, 2026Updated 4 months ago
- 本工具不去主动的做端口扫描，通过聚合了三大资产测绘引擎接口语法，快速获取与目标有关的所有资产列表，并进行一键指纹识别（通用系统指纹、ICP归属等），筛出高价值及脆弱资产。☆30Mar 13, 2025Updated last year
- 二开xiasql☆68Jan 8, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- XSS-Detector是一款基于多线程并发架构的Burp Suite扩展插件，通过精确请求-响应映射机制高效检测Web应用中的XSS漏洞。☆26Apr 27, 2025Updated last year
- 抓取主机保存的RDP凭据☆18Dec 26, 2020Updated 5 years ago
- ☆25Dec 13, 2024Updated last year
- BurpSuite extensions -Bypass Suite☆27Jul 19, 2024Updated 2 years ago
- ☆45Jun 28, 2025Updated last year
- CVE-2024-21006 exp☆17Jul 29, 2024Updated last year
- Log all keyboard and terminal input/output for any app 记录任意程序的键盘输入和终端输入输出☆23Updated this week
- xxl_job_executor_默认Access_Token_不出网综合利用☆41Oct 20, 2025Updated 9 months ago
- Chrome 浏览器插件-企业弱口令字典生成工具☆45May 21, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- APIKit 是Burp Suite 的一个API接口扫描插件，该版本APIKit是对API-Security项目的APIKit1.0进行的二开，增加了扫描开关，避免直接打开burp乱扫被抓起来☆105Dec 19, 2025Updated 7 months ago
- ☆25Jul 2, 2026Updated 2 weeks ago
- 一个批量请求工具☆45Dec 14, 2025Updated 7 months ago
- Parsing 是一个 Chrome 插件，选择ai分析当前页面的Js代码，内置提示词，不再需要单拎js。以及信息收集功能，提升渗透测试效率。☆67Jan 28, 2026Updated 5 months ago
- 微信公众号安全漏洞文章链接聚合☆37Updated this week
- 一个既可主动，又可被动提取链接的burp插件☆47Mar 29, 2024Updated 2 years ago
- 若依框架综合利用工具☆32Dec 16, 2025Updated 7 months ago
- xxl-job漏洞综合利用工具☆160Jun 3, 2025Updated last year
- 漏洞挖掘神器 | 浏览器插件 | 发现页面和JS中的隐藏接口和敏感信息、URL批量打开 & Vulnerability Mining Tool | Browser Plugin | Discover Hidden Interfaces, Sensitive Informat…☆327Aug 27, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JSHunter-一款针对于前端的未授权访问扫描工具☆92Apr 27, 2025Updated last year
- ☆36Mar 4, 2025Updated last year
- 使用 GO开发基于腾讯云 SCF 的IP 代理池，用于绕过 WAF IP限制，支持安全扫描工具调用。☆26Jan 27, 2026Updated 5 months ago
- RVScan 是一个功能强大的 Burp Suite 扩展插件，专为自动化Web应用程序安全测试和漏洞扫描而设计。它提供全面的路径发现、绕过技术、EHole指纹识别和可定制的扫描规则。☆200May 6, 2026Updated 2 months ago
- JWT密钥爆破工具 (wuwu)☆26Dec 22, 2025Updated 6 months ago
- 辅助甲方安全人员巡检网站资产，发现并分析API安全问题☆534Jan 20, 2025Updated last year
- A little tool to play with Windows security☆57Jan 4, 2026Updated 6 months ago
- ☆44Sep 8, 2025Updated 10 months ago
- 主要用于常见工控协议和部分设备的漏洞利用☆21Dec 4, 2025Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated last year
- C#快速添加删除mssql用户小工具☆22Aug 30, 2025Updated 10 months ago
- 渗透测试目录扫描字典☆69Mar 18, 2026Updated 4 months ago
- 获取chrome 浏览器记录☆43Sep 6, 2025Updated 10 months ago
- 添加识别与检测异步js逻辑☆24Aug 26, 2025Updated 10 months ago
- 一个一键生成免杀的webshell工具☆81May 22, 2025Updated last year
- TongWebEJB反序列化漏洞检测工具——Burp插件☆16Apr 26, 2026Updated 2 months ago