发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析
☆498Oct 15, 2026Updated last week
Alternatives and similar repositories for TraceSurface
Users that are interested in TraceSurface are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 针对红队渗透智能体蜜罐☆59Oct 16, 2026Updated last week
- JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持…☆35Oct 16, 2026Updated last week
- PoC for CVE-2022-23940☆15May 7, 2025Updated last year
- CNVD 通用型未授权漏洞广扫 Skill 便携包 | 冷门产品线 x 预置端点字典 x 批量只读验证。含 FOFA 多通道测绘、HTTP/RTSP/FTP 只读探针、双差分防误报、查重+抽验流程与合规红线。仅用于授权范围内的 CNVD 提交。☆30Sep 13, 2026Updated last month
- 闲鱼自动化客服机器人 - 多账号智能回复/自动发货/商品擦亮/滑块验证，基于 FastAPI + Playwright + WebSocket☆29Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 这是一个结合 Burp Suite 扩展插件 和 ProxyPool 爬虫代理 IP 池 的集成方案，用于自动化获取、验证和管理免费代理，实现高效的 HTTP 代理切换。插件支持直接粘贴代理列表或访问 ProxyPool API URL 获取代理，支持 HTTP 和 SOC…☆34Oct 30, 2025Updated 11 months ago
- A modular C2 framework developed in Python for cybersecurity research and adversary emulation. Features encrypted communication, agent bu…☆20Oct 4, 2026Updated 2 weeks ago
- 首个多维度，UI/UX友好的Burp suite越权漏洞检测插件☆46Oct 5, 2026Updated 2 weeks ago
- F0ne's Docs☆16May 9, 2026Updated 5 months ago
- 瑞友天翼sql-rce漏洞,远程代码执行-RCE-sql注入,realor-sql-Injection☆15May 10, 2023Updated 3 years ago
- Async API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks.☆26Jul 5, 2026Updated 3 months ago
- Generates and decodes low-byte-equivalent BMP characters for Java char-to-bytetruncation checks. Intended for defensive verification, sec…☆16Apr 29, 2026Updated 5 months ago
- UShield - USB Guard Camera Edition tracks USB/hard drive plug events and file operations, with USB block and whitelist controls. It auto …☆13Jun 23, 2026Updated 4 months ago
- 一款可以高度自定义的 API 信息收集与记录 Burp扩展套件☆12Dec 1, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 面向互动游戏与具身智能的 沉浸式风格主动异步震动反馈Skill 通过异步通信桥连接ESP32-S3蓝牙驱动低功率震动设备 Agent可依据任务进度或错误选择和剧情节点主动发送强度或节奏编排 还会将任务或游戏事件与Agent情绪转化为可感知的震动☆52Sep 7, 2026Updated last month
- ☆23May 1, 2026Updated 5 months ago
- 金蝶云星空ScpSupRegHandler任意文件上传漏洞检测脚本☆12Nov 23, 2023Updated 2 years ago
- ai自动化渗透小程序，解决了微信小程序更新后偏移值改变导致的注入失败☆181Sep 27, 2026Updated 3 weeks ago
- 🛡️ 蓝队应急响应 / Linux 失陷主机一键排查。纯 Bash 单文件,零依赖,45 个检查模块 + 7 类隧道检测 + 6 类暴力破解 + 攻击路径时间线 + JSON-lines 日志 + 风险评分 + 横向移动证据链。集成 NOP Team 手册 v2.0.2 …☆16Jul 19, 2026Updated 3 months ago
- ☆17Jul 31, 2026Updated 2 months ago
- Turn a public GitHub repository into an interactive software architecture graph. Static analysis, flow tracing, analytics. MIT licensed.☆28Sep 12, 2026Updated last month
- The Java Burp Extension version of my BypassFuzzer tool☆41Oct 7, 2026Updated 2 weeks ago
- Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances.☆58Aug 22, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆130Updated this week
- ☆24Jun 25, 2026Updated 3 months ago
- WAFBypass 是一款高级Web应用防火墙（WAF）检测与绕过工具，旨在回答一个问题："目标真的有WAF防护吗？" 它能够检测目标Web应用是否受到防火墙保护，并自动尝试寻找有效的绕过方法。☆21Sep 26, 2026Updated 3 weeks ago
- PaperLab：一款由 AI 驱动的 OSCP 纸上渗透靶场。支持提取真实通关笔记，通过大语言模型执行变异衍生，无限生成具有严密逻辑链的全新推演靶机。☆21Oct 4, 2026Updated 2 weeks ago
- ☆43Aug 16, 2026Updated 2 months ago
- AI 驱动的自动化代码审计与漏洞挖掘平台，支持多 Agent 协作扫描、数据流分析、漏洞管理和可视化审计☆14Oct 8, 2026Updated 2 weeks ago
- ShadowScan 是一款面向安全从业人员的自动化信息泄露扫描与资产测绘工具。深度整合多平台搜索引擎，通过自动化 Dork 语法扫描发现暴露在公网的敏感文件，并自动提取身份证号、手机号、学号、邮箱、银行卡号等个人敏感信息（PII）。 支持 **Bing / FoFa /…☆50Jun 10, 2026Updated 4 months ago
- Turn any URL into a lightweight native desktop app — single-file .exe on Windows, native .deb on Linux, using the OS built-in WebView wit…☆23Updated this week
- StarMap 是一个面向红队与安全工程师的本地化网络资产测绘平台(资产管理|信息收集|暴露面管理|红蓝对抗收集)☆30Sep 28, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AI Pentest MCP Tools 跨平台AI渗透MCP工具集(支持Kali\Ubuntu\Winodws\Linux\MacOS等操作系统)， 支持接入OpenClaw、龙虾等智能体，支持接入Claude、Trae、Cherry、5Fire、VScode等AI工具，…☆14Jun 29, 2026Updated 3 months ago
- jshERP Exploit GUI☆21Aug 26, 2024Updated 2 years ago
- ☆30Jul 30, 2026Updated 2 months ago
- 个人运维学习笔记☆37Updated this week
- RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nucl…☆45Updated this week
- 哥斯拉webshell管理工具二开☆402Sep 16, 2026Updated last month
- 🛡️ 大模型攻防渗透测试靶场 · 提示注入CTF / OWASP LLM Top10 / 脆弱Agent / 资料聚合。目标模型可切换：DeepSeek直连、OpenRouter中转站(国产+国外十余款小模型)、本地Ollama(DeepSeek-R1 8B离线)。一键本…☆36Jun 20, 2026Updated 4 months ago