phplaber/yawf external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

phplaber/yawf

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/phplaber/yawf)

Close

phplaber / yawfView on GitHubMore

• External links
• Readme badge

Web 漏洞检测工具

☆139Dec 6, 2025Updated 3 months ago

Alternatives and similar repositories for yawf

Users that are interested in yawf are comparing it to the libraries listed below

• y1nglamore / IDOR_detect_tool

  View on GitHub
  一款API水平越权漏洞检测工具
  ☆768Jun 27, 2023Updated 2 years ago
• Ciyfly / woodpecker

  View on GitHub
  兼容xray nuclei yaml格式 以及go代码格式的poc验证扫描器
  ☆190Aug 23, 2023Updated 2 years ago
• Aur0ra-m / APIKiller

  View on GitHub
  API Security DAST & Oprations
  ☆319Jul 5, 2023Updated 2 years ago
• suizhibo / Tao

  View on GitHub
  Tao（道）一款用于java语言函数调用关系生成的工具，致力于提高java代码审计效率。
  ☆11Jul 2, 2024Updated last year
• dahezhiquan / CharcoalFire

  View on GitHub
  炭火，渗透测试全流程工具
  ☆24Sep 1, 2025Updated 6 months ago
• Ciyfly / Argo

  View on GitHub
  Argo is an automated general crawler for automatically obtaining website URLs . Argo 是一个自动化扫描器爬虫 用于自动化获取网站的URL 基于go-rod实现了静态和动态结合的方式来实现
  ☆217Dec 16, 2025Updated 2 months ago
• SAY0l / Sayo-proxyscan

  View on GitHub
  SOCKS4/SOCKS4a/SOCKS5/HTTP/HTTPS fast proxy scanner
  ☆53Sep 8, 2023Updated 2 years ago
• youki992 / VscanPlus

  View on GitHub
  [VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform websit…
  ☆322Oct 10, 2025Updated 4 months ago
• z-bool / Venom-Crawler

  View on GitHub
  毒液爬行器：专为捡洞而生的爬虫神器
  ☆211Mar 3, 2025Updated last year
• NeoTheCapt / PowerScanner

  View on GitHub
  面向HW的红队半自动扫描器
  ☆226Dec 16, 2021Updated 4 years ago
• ssrsec / SpringBootEnvDecrypt

  View on GitHub
  SpringBoot获取被星号脱敏的密码的明文
  ☆57Dec 13, 2021Updated 4 years ago
• winezer0 / APIFinderPlus

  View on GitHub
  目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查
  ☆257Aug 16, 2025Updated 6 months ago
• niudaii / zpscan

  View on GitHub
  一个有点好用的信息收集工具。A somewhat useful information gathering tool.
  ☆1,188Dec 17, 2024Updated last year
• DVKunion / SeaMoon

  View on GitHub
  月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具
  ☆589Jan 21, 2026Updated last month
• YouChenJun / Keydd

  View on GitHub
  从流量包匹配敏感信息的工具-可用作bp、浏览器的下游代理。0感知、无卡顿，支持https。
  ☆280Aug 25, 2024Updated last year
• Drun1baby / FineReportExploit

  View on GitHub
  帆软报表漏洞检测工具
  ☆113Jun 10, 2025Updated 8 months ago
• ffffffff0x / ones

  View on GitHub
  可用于多个网络资产测绘引擎 API 的命令行查询工具
  ☆184Sep 14, 2023Updated 2 years ago
• smxiazi / xia_Yue

  View on GitHub
  burp 插件 xia_Yue（瞎越） 主要用于测试越权、未授权
  ☆671Aug 27, 2024Updated last year
• SecurityPaper / thai_bone

  View on GitHub
  数据库敏感信息扫描
  ☆12Feb 18, 2021Updated 5 years ago
• ffffffff0x / burp_nu_te_gen

  View on GitHub
  nuclei模版生成插件
  ☆108Dec 19, 2023Updated 2 years ago
• tongcheng-security-team / NextScan

  View on GitHub
  飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。
  ☆1,165Jun 30, 2023Updated 2 years ago
• ldsaiyan / EventLogPersist

  View on GitHub
  A Simple Proof Code for Extracting and Executing Shellcode from Event Logs
  ☆27Mar 5, 2023Updated 3 years ago
• m-sec-org / EZ

  View on GitHub
  EZ是一款集信息收集、端口扫描、服务暴破、URL爬虫、指纹识别、被动扫描为一体的跨平台漏洞扫描器。
  ☆1,027Jan 17, 2025Updated last year
• MrWQ / vulnerability-wiki

  View on GitHub
  公开漏洞知识库整合：https://mrwq.github.io/vulnerability-wiki/#/
  ☆134Jan 7, 2025Updated last year
• shuanx / BurpFingerPrint

  View on GitHub
  BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件
  ☆741Sep 5, 2024Updated last year
• k3ppf0r / 2024-PocLib

  View on GitHub
  此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化,绝大部分为自复现并自验过，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉
  ☆308Aug 14, 2024Updated last year
• Neo-Maoku / MultiTshProxy

  View on GitHub
  tsh多终端代理通信
  ☆19Feb 26, 2025Updated last year
• wudijun / Catcher

  View on GitHub
  Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。
  ☆316Feb 18, 2025Updated last year
• bcvgh / daydayExp-pocs

  View on GitHub
  daydayExp的漏洞POC仓库，慢慢更新...
  ☆370Nov 4, 2024Updated last year
• xiaogang000 / XG_JLGJ

  View on GitHub
  专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选
  ☆60Jun 12, 2025Updated 8 months ago
• TheBeastofwar / linuxhacker

  View on GitHub
  一款linux 内网渗透辅助工具
  ☆77Jan 31, 2024Updated 2 years ago
• MzzdToT / HAC_Bored_Writing

  View on GitHub
  各种漏洞批量扫描poc、exp，涵盖未授权、RCE、文件上传、sql注入、信息泄露等
  ☆290Dec 4, 2023Updated 2 years ago
• geekmc / FindShell

  View on GitHub
  内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能
  ☆179May 10, 2023Updated 2 years ago
• luelueking / jvm-sandbox-rasp

  View on GitHub
  一个基于jvm-sandbox高度定制化rasp
  ☆58Sep 28, 2023Updated 2 years ago
• z2p / sweetPotato

  View on GitHub
  基于burpsuite的资产分析工具
  ☆475Apr 29, 2023Updated 2 years ago
• depycode / burpsuite_hack

  View on GitHub
  一款代理扫描器
  ☆566May 5, 2023Updated 2 years ago
• z-bool / Venom-Transponder

  View on GitHub
  毒液流量转发器：自动化捡洞/打点/跳板必备神器，支持联动URL爬虫、各种被动扫描器。
  ☆179Mar 3, 2025Updated last year
• wooluo / SSlogs

  View on GitHub
  应急分析溯源日志工具：一个功能强大的Web日志安全分析工具，集成了规则引擎、AI智能分析和多格式报告生成，专为安全应急响应和威胁溯源而设计。
  ☆107Oct 28, 2025Updated 4 months ago
• anx0ing / thinkphp_scan

  View on GitHub
  Thinkphp各版本漏洞验证脚本
  ☆32Mar 16, 2023Updated 2 years ago