Alternatives and similar repositories for burp-wildcard

Users that are interested in burp-wildcard are comparing it to the libraries listed below

• ggg4566 / BurpBountyPlus

  View on GitHub
  BurpBounty 魔改版本
  ☆418Mar 21, 2022Updated 3 years ago
• 0671 / RabR

  View on GitHub
  Redis-Attack By Replication (通过主从复制攻击Redis)
  ☆356Nov 25, 2022Updated 3 years ago
• pmiaowu / BurpShiroPassiveScan

  View on GitHub
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,790Dec 14, 2022Updated 3 years ago
• bufsnake / blueming

  View on GitHub
  备份文件扫描，并自动进行下载
  ☆130Jul 26, 2023Updated 2 years ago
• NyDubh3 / Pentesting-Active-Directory-CN

  View on GitHub
  域渗透脑图中文翻译版
  ☆280Sep 18, 2021Updated 4 years ago
• f0ng / log4j2burpscanner

  View on GitHub
  CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks
  ☆840Jun 13, 2023Updated 2 years ago
• hackvertor / taborator

  View on GitHub
  A Burp extension to show the Collaborator client in a tab
  ☆24Dec 23, 2022Updated 3 years ago
• hvqzao / burp-token-rewrite

  View on GitHub
  Burp extension for automated handling of CSRF tokens
  ☆16Feb 27, 2018Updated 7 years ago
• pmiaowu / BurpFastJsonScan

  View on GitHub
  一款基于BurpSuite的被动式FastJson检测插件
  ☆1,237Oct 1, 2022Updated 3 years ago
• Wrin9 / weaverOA_sql_RCE

  View on GitHub
  泛微OA_V9全版本的SQL远程代码执行漏洞
  ☆157Apr 20, 2022Updated 3 years ago
• bit4woo / domain_hunter_pro

  View on GitHub
  domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
  ☆2,116Jan 23, 2026Updated 3 weeks ago
• c0ny1 / passive-scan-client

  View on GitHub
  Burp被动扫描流量转发插件
  ☆1,459Jun 17, 2024Updated last year
• ffffffff0x / Pentest101

  View on GitHub
  一些关于渗透测试的Tips
  ☆611Dec 19, 2022Updated 3 years ago
• wgpsec / ENScan

  View on GitHub
  基于各大API的一款企业信息查询工具，为了更快速的获取企业的信息，省去收集的麻烦过程，web端于plat平台上线
  ☆971Apr 13, 2023Updated 2 years ago
• kezibei / Urldns

  View on GitHub
  ☆341Oct 11, 2025Updated 4 months ago
• ethicalhackingplayground / ssrf-king

  View on GitHub
  SSRF plugin for burp Automates SSRF Detection in all of the Request
  ☆610Jan 20, 2021Updated 5 years ago
• pmiaowu / DeserializationTest

  View on GitHub
  就是一个练习Java反序列化的最简单环境
  ☆14Dec 24, 2021Updated 4 years ago
• wyzxxz / aksk_tool

  View on GitHub
  AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…
  ☆778Feb 13, 2025Updated last year
• bigsizeme / fastjson-check

  View on GitHub
  fastjson 被动扫描、不出网payload生成
  ☆367Nov 19, 2021Updated 4 years ago
• chennqqi / godnslog

  View on GitHub
  An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
  ☆469Sep 16, 2023Updated 2 years ago
• Yihsiwei / GetOut360

  View on GitHub
  强制关闭360 需要管理员权限
  ☆171Feb 6, 2022Updated 4 years ago
• bit4woo / burp-api-drops

  View on GitHub
  burp插件开发指南
  ☆619Aug 8, 2021Updated 4 years ago
• idiotc4t / sharpwmi

  View on GitHub
  (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆108Jan 8, 2021Updated 5 years ago
• uknowsec / SharpEventLog

  View on GitHub
  c# 读取登录过本机的登录失败或登录成功（4624，4625）的所有计算机信息，在内网渗透中快速定位运维管理人员。
  ☆206Oct 15, 2019Updated 6 years ago
• fofapro / Hosts_scan

  View on GitHub
  这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。
  ☆1,189Apr 30, 2019Updated 6 years ago
• f0ng / JavaFileDict

  View on GitHub
  Java应用的一些配置文件字典，来源于公开的字典与平时收集
  ☆321Feb 1, 2024Updated 2 years ago
• binganao / TaiO

  View on GitHub
  TaiO 的定位是一款用于攻击方对靶标资产梳理，快速定位脆弱资产的网络空间测绘工具
  ☆75Mar 9, 2022Updated 3 years ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• keven1z / weblogic_memshell

  View on GitHub
  适用于weblogic和Tomcat的无文件的内存马(memshell)
  ☆269Mar 4, 2022Updated 3 years ago
• baisesecxxx / chrome-coookie

  View on GitHub
  ☆12Nov 17, 2024Updated last year
• ffffffff0x / ones

  View on GitHub
  可用于多个网络资产测绘引擎 API 的命令行查询工具
  ☆184Sep 14, 2023Updated 2 years ago
• SummerSec / BurpBountyProfiles

  View on GitHub
  BurpBounty插件的配置文件收集项目
  ☆144Feb 8, 2021Updated 5 years ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,824Oct 20, 2023Updated 2 years ago
• lijiejie / swagger-exp

  View on GitHub
  A Swagger API Exploit
  ☆1,370Jun 7, 2024Updated last year
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆450Jun 14, 2022Updated 3 years ago
• DVPNET / Report_Public

  View on GitHub
  DVPNET 公开漏洞知识库
  ☆94Jun 10, 2021Updated 4 years ago
• wyzxxz / heapdump_tool

  View on GitHub
  heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等
  ☆1,433May 21, 2024Updated last year
• whwlsfb / JDumpSpider

  View on GitHub
  HeapDump敏感信息提取工具
  ☆1,629Dec 15, 2025Updated 2 months ago
• An0nySec / UserAdd

  View on GitHub
  Bypass AV 用户添加
  ☆169Dec 30, 2021Updated 4 years ago