一款支持 目录扫描(可配合熊猫头)+自动绕403+敏感匹配 等的小脚本工具，目前此脚本属于创始测试版，后续会继续升级！！！CowCow🐂🐂
☆17Dec 27, 2024Updated last year
Alternatives and similar repositories for cowcow
Users that are interested in cowcow are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。☆13Mar 7, 2025Updated last year
- 多接口MD5解密PHP版☆16Jan 1, 2025Updated last year
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆41Jul 26, 2026Updated 2 months ago
- SQLMap-FluX 是针对sql注入的改造版本。本项目核心在于通过重构工具的静态特征、逻辑载荷以及交互行为，使其能够模拟拟人化的访问模式，从而在渗透测试中，有效检测并绕过现代Web应用防火墙的特征识别与频率检测。☆46Mar 11, 2026Updated 6 months ago
- 瞎测，主要针对iot设备，路由器、网关、防火墙的常规命令执行、溢出测试☆27Apr 19, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆76Sep 10, 2025Updated last year
- HaE MCP集成是基于 HaE 扩展开发的智能安全分析工具。该工具通过 MCP 协议为 AI 助手提供结构化的敏感信息访问接口，实现自动化的安全数据分析和验证功能。☆21Jan 26, 2026Updated 8 months ago
- 为渗透测试人员和开发者设计的纯前端工具集，专注于信息收集和文本处理，纯前端实现的 Web 工具集，提供 URL 处理、路径分析、信息收集等功能。☆16Jun 27, 2025Updated last year
- XSS漏洞与SSRF漏洞的联合攻击及其综合防范机制实验平台☆15Feb 14, 2025Updated last year
- DDDD-RED v2.0 - 红队自动化扫描工具套件，集成Masscan、Rad、dddd-red三阶段扫描，支持多线程并发、彩色输出、丰富POC库☆16Aug 27, 2025Updated last year
- 对原版JNDIExploit进行修改增加线程和JMX注入内存马☆18Apr 23, 2025Updated last year
- OneScan扩展，原项目已停更，此项目为二开项目,插件ID精简为OST☆56Sep 3, 2026Updated 3 weeks ago
- chrome和edge查看exif有效信息的插件☆12Mar 3, 2025Updated last year
- 基于Java开发的代码字符串搜索工具，用于辅助快速代码审计，筛选危险方法名称搜索代码中可能存在的漏洞☆37Mar 7, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- LeakDetector 是一款专为红队渗透测试人员和安全研究员设计的自动化信息泄露侦察工具。☆124Jun 9, 2026Updated 3 months ago
- 泛查询漏洞扫描Burp插件☆29Jun 26, 2026Updated 3 months ago
- Liunx黑客入侵痕迹排查工具☆34Dec 16, 2025Updated 9 months ago
- ☆19Jun 16, 2026Updated 3 months ago
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- Web 安全渗透测试工具，包含端点发现、跨域消息追踪、原型污染检测、词表生成和 DOM XSS 检测☆36Feb 1, 2026Updated 7 months ago
- 基于mitmproxy的安全工具，支持请求自动加解密、webpack优化、流量关键字查询。☆89Jan 5, 2026Updated 8 months ago
- Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）☆39Nov 13, 2025Updated 10 months ago
- Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligen…☆116Jan 13, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 一个功能强大的多模块网络扫描工具集合，提供命令行和图形界面两种操作方式。本工具设计用于网络安全分析、网络拓扑探测和漏洞扫描等任务，采用模块化设计架构，使得功能扩展和维护变得简单高效。☆77May 18, 2025Updated last year
- Burpsuite验证码DOS攻击插件。☆21Oct 24, 2024Updated last year
- Privacy Check Go☆25Feb 11, 2026Updated 7 months ago
- A passive recursive path probing extension for Burp Suite, built on the Montoya API with YAML rules and low-noise vulnerability detection…☆42Jul 26, 2026Updated 2 months ago
- mapsx 是一款端口扫描｜网段探测｜弱口令爆破工具☆23Nov 14, 2025Updated 10 months ago
- burp越权测试插件☆21Sep 3, 2026Updated 3 weeks ago
- burpsuite passive-scan-client 插件持续维护分支 v2024☆89Aug 16, 2025Updated last year
- IP筛选工具，可快速检索IP并查询威胁情报，可自行对接防火墙等设备进行IP封禁☆18Aug 22, 2024Updated 2 years ago
- Chrome 扩展：页面资产梳理 · 技术指纹识别 · Spring/Webpack 探测 · 云存储漏洞扫描 · 实战 Payload 字典。仅限授权安全测试。☆25Jul 22, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 一款最全未授权访问漏洞批量检测工具，集成40+常见未授权访问漏洞；使用PYQT6，为其添加了GUI界面☆128Jul 31, 2025Updated last year
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆17Aug 25, 2025Updated last year
- ☆46Jun 28, 2025Updated last year
- MPET (Multi-Protocol Exploitation Toolkit) 是一款专业的多协议安全测试工具，基于 Wails 框架构建的现代化桌面应用。它提供了对 25+ 种主流服务协议的连接测试、未授权访问检测、弱口令检测和漏洞利用能力，是安全研究人员和渗透测试…☆225Jan 22, 2026Updated 8 months ago
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆171Jun 15, 2026Updated 3 months ago
- 自己使用的一些脚本和工具☆15Sep 30, 2024Updated last year
- 漏洞挖掘小工具，用于发现页面中的隐藏可点击元素☆86Jun 4, 2025Updated last year