一款高效的 Burp Suite 插件，专注于检测 URL 路径与 XFF 头部潜在的 SQL 注入漏洞，并集成接口自动采集。
☆35Apr 4, 2026Updated 4 months ago
Alternatives and similar repositories for BurpInjector
Users that are interested in BurpInjector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 泛查询漏洞扫描Burp插件☆28Jun 26, 2026Updated last month
- Linux 打靶常用工具整合套件 爱来自 ll ❤️☆58Updated this week
- Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。☆108Updated this week
- ThinkPHP 漏洞扫描工具☆16Oct 10, 2025Updated 10 months ago
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- URLReplayer是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。☆45Jan 15, 2026Updated 7 months ago
- 开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。☆90Jan 17, 2026Updated 7 months ago
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆20Jan 23, 2026Updated 7 months ago
- 二开xiasql☆67Jan 8, 2026Updated 7 months ago
- LeakDetector 是一款专为红队渗透测试人员和安全研究员设计的自动化信息泄露侦察工具。☆123Jun 9, 2026Updated 2 months ago
- 各类综合 upload_fuzz,smb_fuzz,tls绕过,被动指纹扫描☆71Jun 6, 2025Updated last year
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆36Jul 26, 2026Updated 3 weeks ago
- **S-APICONT** 是一款功能强大的 Burp Suite 扩展插件，专注于自动化收集、提取和测试 Web 应用中的 API 接口。它能够从浏览器流量中智能识别 API 端点，支持多种前端框架的路由解析，并提供批量测试和敏感信息检测功能。☆128Mar 7, 2026Updated 5 months ago
- 识别指纹后进行对应cms的漏洞扫描☆27Aug 30, 2024Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 一款轻量级 Burp Suite 被动扫描探测SQLi XSS SSTI漏洞插件☆88Mar 18, 2026Updated 5 months ago
- A command-line tool for interacting with HackMyVM, supporting machine listing, downloading, and flag submission with session persistence.☆17Jan 18, 2026Updated 7 months ago
- 漏洞挖掘小工具，用于发现页面中的隐藏可点击元素☆86Jun 4, 2025Updated last year
- 渗透测试目录扫描字典☆69Mar 18, 2026Updated 5 months ago
- StegsnowBruteForcer — outil Python pour brute-force de mots de passe dans les documents.☆15Feb 17, 2026Updated 6 months ago
- A passive recursive path probing extension for Burp Suite, built on the Montoya API with YAML rules and low-noise vulnerability detection…☆42Jul 26, 2026Updated 3 weeks ago
- **WebScan Pro** 是一款专为安全研究人员和渗透测试工程师设计的高性能网站目录扫描工具。它采用模块化架构设计，结合了强大的多线程扫描引擎与直观的图形用户界面（GUI），旨在帮助用户快速、准确地发现目标网站的隐藏资源、未授权访问接口及敏感文件。☆35Jun 26, 2026Updated last month
- 基于RouteVulScanPlus的burp插件更新，增加响应内容自定义正则匹配减少误报☆11May 28, 2025Updated last year
- js主动参数提取与构造工具☆99Dec 22, 2025Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- BCrypt解密爆破工具 BCrypt爆破解密工具☆35Oct 9, 2023Updated 2 years ago
- 添加识别与检测异步js逻辑☆24Aug 26, 2025Updated 11 months ago
- xia_Yue 插件修改版，瞎越修改版，修复中文重放乱码，添加请求行越权测试，一键导出越权url，允许重复url测试等 功能☆79Jan 5, 2026Updated 7 months ago
- Chrome 浏览器插件-企业弱口令字典生成工具☆48May 21, 2026Updated 3 months ago
- Enhanced Repeater Manager - Burp Suite 增强重放插件☆17Aug 13, 2026Updated last week
- 前端信息收集与 DOMXSS 审计工作台☆29Mar 27, 2026Updated 4 months ago
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated last year
- Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligen…☆117Jan 13, 2026Updated 7 months ago
- burp越权测试插件☆19May 15, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- HiddenDomainHunter☆20Apr 15, 2023Updated 3 years ago
- Hengge team develops JavaScript specifically for loading Webpack for batch reading☆324Jun 11, 2026Updated 2 months ago
- NSFOCUS API_Sword：A Burp Suite extension, Automatically recursively collect API endpoints from any response☆416Jan 20, 2026Updated 7 months ago
- 基于 ARL 深度扩展与持续优化的互联网资产自动化收集平台，面向资产发现、暴露面梳理、风险排查与持续监测等场景，提供域名识别、子域名发现、测绘引擎查询、端口与服务识别、指纹分析、URL 提取、漏洞检测、计划任务与结果汇总等能力 系统适用于乙方专业安全厂商、甲方安全运维部门开…☆120Aug 11, 2026Updated last week
- ☆142Feb 8, 2025Updated last year
- S-XIASQL 是一款专业的 Burp Suite SQL注入检测插件，能够自动化检测Web应用中的SQL注入漏洞。通过智能分析HTTP请求响应，快速识别潜在的SQL注入点，大幅提升渗透测试效率。☆98Mar 16, 2026Updated 5 months ago
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆122Jul 30, 2025Updated last year