The scanner helps to scan misconfigured reverse proxy servers and misconfigured forward proxy servers
☆175Apr 19, 2023Updated 2 years ago
Alternatives and similar repositories for MisConfig_HTTP_Proxy_Scanner
Users that are interested in MisConfig_HTTP_Proxy_Scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一款API水平越权漏洞检测工具☆766Jun 27, 2023Updated 2 years ago
- Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.☆422Jun 27, 2024Updated last year
- 命令执行不回显但DNS协议出网的命令回显场景解决方案(修改为使用ceye接收请求,添加自定义DNS服务器)☆292Aug 20, 2023Updated 2 years ago
- 一个高度可定制化的JNDI和Java反序列化利用工具☆472Jan 17, 2023Updated 3 years ago
- Java应用的一些配置文件字典,来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- Argo is an automated general crawler for automatically obtaining website URLs . Argo 是一个自动化扫描器爬虫 用于自动化获取网站的URL 基于go-rod实现了静态和动态结合的方式来实现☆218Dec 16, 2025Updated 3 months ago
- 爬网站JS文件,自动fuzz api接口,指定api接口(针对前后端分离项目,可指定后端接口地址),回显api响应☆755Jul 20, 2023Updated 2 years ago
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 2 years ago
- A Go library for generating Java deserialization payloads.☆155Sep 9, 2024Updated last year
- 这个脚本主要提供对Exchange邮件服务器的账户爆破功能,集成了现有主流接口的爆破方式。☆339May 22, 2023Updated 2 years ago
- 完善的动态备份文件扫描工具 实现动态字典渲染、动态结果判断、自动字典记录、的敏感文件扫描器☆28May 21, 2025Updated 10 months ago
- 递归式寻找域名和api。☆722Aug 3, 2023Updated 2 years ago
- 一款代理扫描器☆566May 5, 2023Updated 2 years ago
- 对Auth/Waf 自动化bypass的burpsuite插件☆1,110Feb 28, 2026Updated 3 weeks ago
- API Security DAST & Oprations☆319Jul 5, 2023Updated 2 years ago
- URLFUZZ By T00ls.Net☆24Jul 4, 2023Updated 2 years ago
- Alibaba Nacos存在默认token.secret.key,导致远程攻击者可以绕过密钥认证接管Nacos☆19Mar 17, 2023Updated 3 years ago
- 通过 Redis 主从写出无损文件☆718May 25, 2020Updated 5 years ago
- Shiro文件上传工具☆102Jun 28, 2023Updated 2 years ago
- 六大云存储,泄露利用检测工具☆1,245Mar 28, 2025Updated 11 months ago
- 基于burpsuite的资产分析工具☆475Apr 29, 2023Updated 2 years ago
- burp手工检测fastjson辅助☆87Mar 4, 2024Updated 2 years ago
- ☆275Oct 28, 2021Updated 4 years ago
- Mssql利用工具☆277Aug 7, 2023Updated 2 years ago
- 建议使用新版:https://github.com/jar-analyzer/jar-analyzer☆897Nov 30, 2023Updated 2 years ago
- AK资源管理工具,阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret,利用AK获取资源信息和操作资源,ECS/CVM/E2/UHOST/ECI/BCC执行命令,OSS/COS/S3/BOS…☆779Feb 13, 2025Updated last year
- Java Js Engine Payloads All in one☆291Aug 21, 2023Updated 2 years ago
- OrcaC2是一款基于Websocket加密通信的多功能C&C框架,使用Golang实现。☆676Dec 30, 2022Updated 3 years ago
- 用于host碰撞而生的小工具,专门检测渗透中需要绑定hosts才能访问的主机或内部系统☆659Jun 13, 2024Updated last year
- burp插件开发指南☆619Aug 8, 2021Updated 4 years ago
- fastjson不出网利用、c3p0☆256Jul 30, 2021Updated 4 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- T00ls.Com 2023第一期线下沙龙(苏州)PPT合集☆15Jul 17, 2023Updated 2 years ago
- domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等☆2,118Mar 3, 2026Updated 3 weeks ago
- 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY …☆827Sep 18, 2023Updated 2 years ago
- java内存对象搜索辅助工具☆823Sep 23, 2022Updated 3 years ago
- Burp被动扫描流量转发插件☆1,459Jun 17, 2024Updated last year
- MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize☆1,362Nov 18, 2021Updated 4 years ago
- RPC远程主机信息匿名扫描工具☆319Sep 30, 2022Updated 3 years ago