yuyan-sec/Doraemon external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

yuyan-sec/Doraemon

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/yuyan-sec/Doraemon)

Close

yuyan-sec / DoraemonView on GitHubMore

• External links
• Readme badge

渗透辅助 BurpSuite 小插件

☆232Nov 26, 2025Updated 3 months ago

Alternatives and similar repositories for Doraemon

Users that are interested in Doraemon are comparing it to the libraries listed below

• yuyan-sec / druid_sessions

  View on GitHub
  获取 alibaba druid 一些 sessions , sql , urls
  ☆292Apr 4, 2025Updated 10 months ago
• yuyan-sec / RedisEXP

  View on GitHub
  Redis 漏洞利用工具
  ☆938Jan 26, 2025Updated last year
• a1phaboy / FastjsonScan

  View on GitHub
  Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
  ☆1,050Oct 7, 2022Updated 3 years ago
• TonyNPham / GodzillaPlugin-Suo5-MemProxy

  View on GitHub
  一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理
  ☆288Aug 8, 2023Updated 2 years ago
• f0ng / selistener

  View on GitHub
  用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看
  ☆127Apr 17, 2023Updated 2 years ago
• Ryze-T / Sylas

  View on GitHub
  数据库综合利用工具
  ☆544Feb 16, 2022Updated 4 years ago
• czz1233 / GBByPass

  View on GitHub
  冰蝎 哥斯拉 WebShell bypass
  ☆763Jan 15, 2026Updated last month
• achuna33 / MYJNDIExploit

  View on GitHub
  自己的JNDI 利用工具，添加一些人性化功能
  ☆131Sep 4, 2022Updated 3 years ago
• smxiazi / xia_sql

  View on GitHub
  xia SQL (瞎注) burp 插件 ，在每个参数后面填加一个单引号，两个单引号，一个简单的判断注入小插件。
  ☆1,229May 18, 2023Updated 2 years ago
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆254Jul 12, 2023Updated 2 years ago
• inbug-team / SweetBabyScan

  View on GitHub
  Red Tools 渗透测试
  ☆584Jul 7, 2022Updated 3 years ago
• f0ng / poc2jar

  View on GitHub
  Java编写，Python作为辅助依赖的漏洞验证、利用工具，添加了进程查找模块、编码模块、命令模块、常见漏洞利用GUI模块、shiro rememberMe解密模块，加快测试效率
  ☆762Feb 25, 2024Updated 2 years ago
• metaStor / SpringScan

  View on GitHub
  SpringScan 漏洞检测 Burp插件
  ☆605Nov 14, 2023Updated 2 years ago
• Peony2022 / shiro_killer

  View on GitHub
  批量ShiroKey检测爆破工具
  ☆308Jan 4, 2023Updated 3 years ago
• Tas9er / ByPassBehinder4J

  View on GitHub
  冰蝎Java WebShell自动化免杀生成
  ☆783Mar 15, 2022Updated 3 years ago
• 0x727 / BypassPro

  View on GitHub
  对Auth/Waf 自动化bypass的burpsuite插件
  ☆1,089Updated this week
• f0ng / autoDecoder

  View on GitHub
  Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。
  ☆1,327Dec 14, 2025Updated 2 months ago
• sp4zcmd / WeblogicExploit-GUI

  View on GitHub
  Weblogic漏洞利用图形化工具 支持注入内存马、一键上传webshell、命令执行
  ☆776Apr 20, 2022Updated 3 years ago
• 1n7erface / Template

  View on GitHub
  Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描
  ☆1,115Sep 16, 2023Updated 2 years ago
• SummerSec / SpringExploit

  View on GitHub
  🚀 一款为了学习go而诞生的漏洞利用工具
  ☆450Jun 14, 2022Updated 3 years ago
• F6JO / RouteVulScan

  View on GitHub
  Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件
  ☆1,314Jun 29, 2024Updated last year
• pmiaowu / HostCollision

  View on GitHub
  用于host碰撞而生的小工具,专门检测渗透中需要绑定hosts才能访问的主机或内部系统
  ☆659Jun 13, 2024Updated last year
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• Goqi / Erfrp

  View on GitHub
  Erfrp-frp二开-免杀与隐藏
  ☆633Dec 4, 2022Updated 3 years ago
• amaz1ngday / fastjson-exp

  View on GitHub
  fastjson利用，支持tomcat、spring回显，哥斯拉内存马；回显利用链为dhcp、ibatis、c3p0。
  ☆327Mar 15, 2022Updated 3 years ago
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,467Apr 25, 2024Updated last year
• F6JO / JsRouteScan

  View on GitHub
  Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件
  ☆360Jun 7, 2024Updated last year
• z2p / sweetPotato

  View on GitHub
  基于burpsuite的资产分析工具
  ☆474Apr 29, 2023Updated 2 years ago
• f0ng / log4j2burpscanner

  View on GitHub
  CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks
  ☆841Jun 13, 2023Updated 2 years ago
• Bl0omZ / JNDIEXP

  View on GitHub
  JNDI在java高版本的利用工具,FUZZ利用链
  ☆597Oct 8, 2022Updated 3 years ago
• Hel10-Web / Databasetools

  View on GitHub
  一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接
  ☆860Aug 30, 2023Updated 2 years ago
• pykiller / API-T00L

  View on GitHub
  互联网厂商API利用工具。
  ☆555Sep 13, 2024Updated last year
• xfiftyone / seeyon-exploit

  View on GitHub
  致远OA漏洞检测
  ☆189Aug 2, 2023Updated 2 years ago
• u21h2 / nacs

  View on GitHub
  事件驱动的渗透测试扫描器 Event-driven pentest scanner
  ☆698Jul 7, 2024Updated last year
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆736Sep 9, 2024Updated last year
• burpheart / koko-moni

  View on GitHub
  一个基于网络空间搜索引擎的攻击面管理平台，可定时进行资产信息爬取，及时发现新增资产，本项目聚合了 Fofa、Hunter、Quake、Zoomeye 和 Threatbook 的数据源，并对获取到的数据进行去重与清洗
  ☆457Apr 19, 2023Updated 2 years ago
• Ni4n / ShellGenerate

  View on GitHub
  哥斯拉jsp/jspx免杀webshell生成器
  ☆208Apr 28, 2023Updated 2 years ago
• cseroad / Webshell_Generate

  View on GitHub
  用于生成各类免杀webshell
  ☆1,284Jan 8, 2026Updated last month
• savior-only / Spring_All_Reachable

  View on GitHub
  Spring漏洞综合利用工具
  ☆675Jul 5, 2023Updated 2 years ago