发现藏在前端代码里的 API,验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析
☆400Sep 7, 2026Updated this week
Alternatives and similar repositories for TraceSurface
Users that are interested in TraceSurface are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆64Updated this week
- A network segmentation and egress control testing tool for PCI DSS v4.0 compliance. Automatically discovers network segments, validates i…☆14May 20, 2026Updated 3 months ago
- Chrome Extensions Dataset☆12Updated this week
- Used to manage burp extensions that I find useful.☆12Apr 26, 2022Updated 4 years ago
- 一款支持检测web应用程序未授权访问缺陷的burp suite插件,可自定义配置检测字段以及返回包json数据分析☆13Apr 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- AI-native test management for QA engineers, SREs, and DevOps teams. From unit tests to chaos experiments: unified in Markdown, validated …☆61Jul 17, 2026Updated last month
- ☆14Jul 29, 2026Updated last month
- Thermal pocket printer - BLE protocol reverse engineering, Python CLI, and web GUI☆19Sep 4, 2026Updated last week
- Active Directory forensic framework☆16May 18, 2026Updated 3 months ago
- Grab form parameters easily☆14Dec 11, 2024Updated last year
- MIT IEEE URTC 2025. GSET 2025. Repository for "TaintMonkey: Dynamic Taint Analysis of Python Web Applications Using Monkey Patching". A P…☆16Aug 28, 2025Updated last year
- A Burp extension to enable modification of FIX messages when relayed from MitM_Relay☆16Feb 10, 2023Updated 3 years ago
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆16Apr 22, 2026Updated 4 months ago
- Export GitHub starred repositories, lists and topics to HTML, JSON, Markdown, or bookmark, grouped by language or topic, ordered by time,…☆23Aug 20, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Okta Data Collector for BloodHound Community☆17Apr 21, 2026Updated 4 months ago
- A terminal UI for browsing and inspecting vector databases☆15Apr 19, 2026Updated 4 months ago
- A tool for leveraging elevated acess over a computer to boot the computer into Windows Safe Mode, alter settings, and then boot back into…☆17Nov 6, 2021Updated 4 years ago
- One PsExec client to rule them all☆15Mar 25, 2026Updated 5 months ago
- Experiments with GitHub event data☆20Apr 29, 2026Updated 4 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆62Sep 3, 2026Updated last week
- A powerful Burp Suite extension that helps in converting requests between different formats, making web application testing more efficien…☆13Nov 18, 2024Updated last year
- ☆17Aug 17, 2025Updated last year
- Security scanner for developer workstations — detects IDE extension risks, AI tool permissions, plaintext secrets, and vulnerable depende…☆21Sep 4, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Offensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.☆16Aug 9, 2026Updated last month
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆49Updated this week
- BlueDot - A local console for the global cloud. One TUI To Rule Them All. Shop and Deploy VPS from command line, compare offers from AWS,…☆15Feb 21, 2026Updated 6 months ago
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated 2 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 4 months ago
- Local-first, zero-trust agentic IDE for verifiable autonomous software development.☆864Updated this week
- This repository contains detection and threat hunting queries created by NVISO’s CSIRT and SOC teams.☆19Jun 25, 2026Updated 2 months ago
- The Ultimate File Upload Bypass Generator☆14Nov 24, 2025Updated 9 months ago
- ex-redirect — An automated open redirect scanner using Wayback Machine archives. Supports subdomain grouping, live URL filtering, and Wor…☆15May 9, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- MCP server for automated binary diffing.☆19Jul 15, 2026Updated last month
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆19Aug 26, 2026Updated 2 weeks ago
- LdapWordlistHarvester but then with neo4j☆17Jun 3, 2025Updated last year
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆17Jul 2, 2026Updated 2 months ago
- 基于ZygiskFrida修改而来的行为分析和注入器☆18Apr 9, 2026Updated 5 months ago
- PenTest and BugBounty 🕵️☆16Aug 18, 2026Updated 3 weeks ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated last month