一款高效的 Burp Suite 插件，专注于检测 URL 路径与 XFF 头部潜在的 SQL 注入漏洞，并集成接口自动采集。
☆35Apr 4, 2026Updated 5 months ago
Alternatives and similar repositories for BurpInjector
Users that are interested in BurpInjector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 泛查询漏洞扫描Burp插件☆29Jun 26, 2026Updated 2 months ago
- Linux 打靶常用工具整合套件 爱来自 ll ❤️☆62Aug 22, 2026Updated 3 weeks ago
- Mazesec团队自制靶机题解仓库，专注于分享HackMyVM平台的自制靶机PDF题解，涵盖渗透测试实战与安全研究，供学习交流使用。☆110Sep 6, 2026Updated last week
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated 2 years ago
- URLReplayer是一个burp插件，一个用于自动化 API 接口提取、参数解析及批量验证 的 Burp Suite 插件。旨在从 HTTP 响应中快速挖掘未公开的 API 端点并进行有效性测试。☆44Jan 15, 2026Updated 7 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。☆94Jan 17, 2026Updated 7 months ago
- 基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具☆21Jan 23, 2026Updated 7 months ago
- 二开xiasql☆67Jan 8, 2026Updated 8 months ago
- LeakDetector 是一款专为红队渗透测试人员和安全研究员设计的自动化信息泄露侦察工具。☆124Jun 9, 2026Updated 3 months ago
- 各类综合 upload_fuzz,smb_fuzz,tls绕过,被动指纹扫描☆71Jun 6, 2025Updated last year
- 多维度，UI/UX友好的Burp suite越权漏洞检测插件☆38Jul 26, 2026Updated last month
- **S-APICONT** 是一款功能强大的 Burp Suite 扩展插件，专注于自动化收集、提取和测试 Web 应用中的 API 接口。它能够从浏览器流量中智能识别 API 端点，支持多种前端框架的路由解析，并提供批量测试和敏感信息检测功能。☆128Mar 7, 2026Updated 6 months ago
- 识别指纹后进行对应cms的漏洞扫描☆27Aug 30, 2024Updated 2 years ago
- 一款轻量级 Burp Suite 被动扫描探测SQLi XSS SSTI漏洞插件☆89Mar 18, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A command-line tool for interacting with HackMyVM, supporting machine listing, downloading, and flag submission with session persistence.☆16Jan 18, 2026Updated 7 months ago
- 漏洞挖掘小工具，用于发现页面中的隐藏可点击元素☆86Jun 4, 2025Updated last year
- StegsnowBruteForcer — outil Python pour brute-force de mots de passe dans les documents.☆15Feb 17, 2026Updated 6 months ago
- **WebScan Pro** 是一款专为安全研究人员和渗透测试工程师设计的高性能网站目录扫描工具。它采用模块化架构设计，结合了强大的多线程扫描引擎与直观的图形用户界面（GUI），旨在帮助用户快速、准确地发现目标网站的隐藏资源、未授权访问接口及敏感文件。☆35Jun 26, 2026Updated 2 months ago
- A passive recursive path probing extension for Burp Suite, built on the Montoya API with YAML rules and low-noise vulnerability detection…☆42Jul 26, 2026Updated last month
- 基于RouteVulScanPlus的burp插件更新，增加响应内容自定义正则匹配减少误报☆11May 28, 2025Updated last year
- js主动参数提取与构造工具☆99Dec 22, 2025Updated 8 months ago
- BCrypt解密爆破工具 BCrypt爆破解密工具☆35Oct 9, 2023Updated 2 years ago
- 添加识别与检测异步js逻辑☆24Aug 26, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- xia_Yue 插件修改版，瞎越修改版，修复中文重放乱码，添加请求行越权测试，一键导出越权url，允许重复url测试等功能☆79Jan 5, 2026Updated 8 months ago
- Chrome 浏览器插件-企业弱口令字典生成工具☆48May 21, 2026Updated 3 months ago
- 前端信息收集与 DOMXSS 审计工作台☆30Mar 27, 2026Updated 5 months ago
- Enhanced Repeater Manager - Burp Suite 增强重放插件☆18Aug 13, 2026Updated last month
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated last year
- Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligen…☆117Jan 13, 2026Updated 8 months ago
- burp越权测试插件☆20Sep 3, 2026Updated last week
- HiddenDomainHunter☆20Apr 15, 2023Updated 3 years ago
- Hengge team develops JavaScript specifically for loading Webpack for batch reading☆331Jun 11, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- NSFOCUS API_Sword：A Burp Suite extension, Automatically recursively collect API endpoints from any response☆417Jan 20, 2026Updated 7 months ago
- 基于 ARL 深度扩展与持续优化的互联网资产自动化收集平台，面向资产发现、暴露面梳理、风险排查与持续监测等场景，提供域名识别、子域名发现、测绘引擎查询、端口与服务识别、指纹分析、URL 提取、漏洞检测、计划任务与结果汇总等能力 系统适用于乙方专业安全厂商、甲方安全运维部门开…☆121Updated this week
- ☆141Feb 8, 2025Updated last year
- S-XIASQL 是一款专业的 Burp Suite SQL注入检测插件，能够自动化检测Web应用中的SQL注入漏洞。通过智能分析HTTP请求响应，快速识别潜在的SQL注入点，大幅提升渗透测试效率。☆100Mar 16, 2026Updated 5 months ago
- 基于已收集指纹库进行识别网站指纹的浏览器插件☆123Jul 30, 2025Updated last year
- ARL与AWVS联动，实现自动化扫描并推送结果☆20Jul 11, 2024Updated 2 years ago
- 一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。☆13Mar 7, 2025Updated last year