一款支持检测web应用程序未授权访问缺陷的burp suite插件,可自定义配置检测字段以及返回包json数据分析
☆12Apr 22, 2024Updated 2 years ago
Alternatives and similar repositories for NoAuthScan
Users that are interested in NoAuthScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp-plugin☆17Jul 18, 2024Updated last year
- Whale-ApiUse是burp插件,可以用来测试wx公众号,微信小程序,钉钉,企业微信等的接口,通过输入key和secret进行测试,之所以做这个首先这是一个练手项目,后续也会继续维护更新,如果有好的建议欢迎留言。其次由于现有的工具都要额外下载,用起来繁琐,所以我想着通…☆14Jan 7, 2024Updated 2 years ago
- 瞎越是一款 Burp Suite 的安全插件,主要用于测试 Web 越权、未授权的网络安全漏洞。☆11Jun 13, 2024Updated last year
- Burp plugin for jxscout☆21May 12, 2025Updated last year
- Burp被动扫描流量转发插件☆84Jul 18, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 一款支持检测host头攻击的burp suite插件☆54Feb 21, 2024Updated 2 years ago
- ☆112Mar 6, 2023Updated 3 years ago
- 一个既可主动,又可被动提取链接的burp插件☆47Mar 29, 2024Updated 2 years ago
- Asset inventory of over 800 public bug bounty programs.☆12Jun 12, 2023Updated 2 years ago
- CodeVulnScan 是一款基于正则表达式的代码安全审计工具,专为红队成员快速定位sink设计。它能够快速扫描目标代码库,定位潜在的漏洞 Sink 点,提升代码审计效率。☆64Feb 11, 2026Updated 3 months ago
- awd attack framework,Django + Mysql☆16Feb 8, 2025Updated last year
- Jasmin Ransomware 是一款用于模拟真实勒索软件攻击的高级红队工具(WannaCry Clone)。Jasmin 帮助安全研究人员克服外部攻击的风险。☆16Nov 11, 2022Updated 3 years ago
- 这是一个WebShell收集项目☆12Nov 24, 2017Updated 8 years ago
- Parsing 是一个 Chrome 插件,选择ai分析当前页面的Js代码,内置提示词,不再需要单拎js。以及信息收集功能,提升渗透测试效率。☆64Jan 28, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 基于Golang实现的简易DDOS攻击示例(仅供测试,请勿用于非法用途)☆15Mar 21, 2019Updated 7 years ago
- 一款扫描js中敏感api的burp插件☆39Aug 30, 2023Updated 2 years ago
- MiniO verify interface sensitive information disclosure vulnerability (CVE-2023-28432)☆10Mar 24, 2023Updated 3 years ago
- Saves pages to Wayback machine☆12Dec 2, 2024Updated last year
- APIKit 是Burp Suite 的一个API接口扫描插件,该版本APIKit是对API-Security项目的APIKit1.0进行的二开,增加了扫描开关,避免直接打开burp乱扫被抓起来☆101Dec 19, 2025Updated 5 months ago
- 基于Xposed / Lsposed的主动调用抽取壳脱壳工具☆124Apr 22, 2026Updated last month
- Your subdomains are free for the taking - no API key, no mistaking! 🕺☆37Feb 27, 2023Updated 3 years ago
- JeecgBoot综合漏洞利用工具版本更新☆18Feb 18, 2025Updated last year
- 应急响应、取证过程中的Windows日志辅助分析工具☆53May 26, 2026Updated 2 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 网络安全应急响应信息收集利器 - Eagle_Eye:您的终端信息自动收集专家☆14Jul 11, 2024Updated last year
- 一个重庆高校在线开放课程平台自动化工具包。☆12Jun 1, 2026Updated last week
- cryptocrack 是一个用Python编写的密码自动破解框架,在basecrack的基础上进行功能完善,期望解决CTF中Crypto部分题型☆14Jan 6, 2023Updated 3 years ago
- Unified Vulnerability Intelligence Platform☆71Dec 21, 2025Updated 5 months ago
- 🔒 越权测试助手 (Privilege Escalation Testing Assistant)☆16Mar 28, 2025Updated last year
- A simple utility to perform reverse WHOIS lookups using whoisxml API☆42Feb 4, 2023Updated 3 years ago
- 基于 ARL 深度扩展与持续优化的互联网资产自动化收集平台,面向资产发现、暴露面梳理、风险排查与持续监测等场景,提供域名识别、子域名发现、测绘引擎查询、端口与服务识别、指纹分析、URL 提取、漏洞检测、计划任务与结果汇总等能力 系统适用于乙方专业安全厂商、甲方安全运维部门开…☆95May 19, 2026Updated 3 weeks ago
- A fast terminal UI for reviewing Git diffs with support for annotations for agents☆133Updated this week
- A BurpSuite extension for vulnerability Scanning☆30Feb 16, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- xia_Yue 插件修改版,瞎越修改版,修复中文重放乱码,添加请求行越权测试,一键导出越权url,允许重复url测试等功能☆78Jan 5, 2026Updated 5 months ago
- Caido's passive workflow to find potential leaked secrets, PII, and sensitive fields.☆28Jan 13, 2025Updated last year
- ARL 2.6.2-docker国内环境快速部署☆16Sep 25, 2024Updated last year
- 一款ctf工具,包含rsa模板解密,misc方向功能,一些解码功能,致力于帮助ctf比赛中减少繁琐步骤,快速解答模板题☆16Mar 18, 2025Updated last year
- genAI agent providing security context, tooling for performing security analysis on CVE, components and more☆30Updated this week
- AI-powered MCP penetration testing framework combining HexStrike's 150+ security tools with BOAZ's advanced payload evasion (77+ loader…☆133Nov 27, 2025Updated 6 months ago
- 存储桶遍历漏洞利用脚本☆156Jul 19, 2023Updated 2 years ago