序号

名称

用途

来源

1

URISearch_V1.1_T00LS_bate

目录扫描

 

2

turbo-intruder-all

高速爆破

https://github.com/PortSwigger/turbo-intruder

3

TsojanScan-1.4-jar-with-dependencies

漏洞检测,支持thinkphp、weblogic、fastjson、Laravel、SQL

https://github.com/Tsojan/TsojanScan

4

sqlmap4burp++.0.2

sqlmap联动

https://github.com/c0ny1/sqlmap4burp-plus-plus

5

RouteVulScan-1.4

被动漏洞扫描

https://github.com/F6JO/RouteVulScan

6

passive-scan-client-0.3.1

被动扫描流量转发

https://github.com/c0ny1/passive-scan-client

7

OutLook-1.2.0

OutLook信息获取

 

8

NPSauto-1.0

NPS反制

 

9

log4j2burpscanner-0.22.0

lo4j2漏洞检测

https://github.com/f0ng/log4j2burpscanner

10

knife-2.1-jar-with-dependencies

综合工具类似hackbar

https://github.com/bit4woo/knife

11

struts_ext_v2

struts漏洞检测

 

12

JWT4B-jar-with-dependencies

JWT

https://github.com/PortSwigger/json-web-tokens

13

J2EEScan

J2EE 应用程序漏洞检测

https://github.com/ilmila/J2EEScan

14

HTTPHeadModifer.v0.1

快速修改HTTP数据包头

 

15

HaE-2.4.6-J8

请求高亮标记与信息提取的辅助型框架式插件

https://github.com/gh0stkey/HaE

16

HackBar

hackbar

https://github.com/d3vilbug/HackBar

17

Fiora

漏洞快速搜索

https://github.com/bit4woo/Fiora

18

FastjsonScan

Fastjson反序列化检测

https://github.com/Maskhe/FastjsonScan

19

fakeIP

伪造指定ip

https://github.com/TheKingOfDuck/burpFakeIP

20

DaE

解密

 

21

chunked-coding-converter-0.4.0

分块传输绕WAF

https://github.com/c0ny1/chunked-coding-converter

22

captcha-killer-modified-0.21-beta-jdk8

图像验证码爆破

https://github.com/f0ng/captcha-killer-modified

23

BurpShiroPassiveScan

被动式shiro检测

https://github.com/pmiaowu/BurpShiroPassiveScan

24

BurpFastJsonScan

被动式FastJson检测

https://github.com/pmiaowu/BurpFastJsonScan

25

burp-info-extractor

快速提取数据中有价值的信息

https://github.com/theLSA/burp-info-extractor

26

Burp-Auto-Do-Intercept-0.0.3-all

自动拦截指定URL

https://github.com/xiaoxiaoleo/Burp-Auto-Do-Intercept

27

APIKit

主动/被动扫描发现应用泄露的API文档

https://github.com/API-Security/APIKit

文章作者: weehhd
版权声明: 本站所有文章除特别声明外,均採用 CC BY-NC-SA 4.0 许可协议。转载请注明来自 weehhd
渗透软件
喜欢就支持一下吧
打赏
微信 微信
支付宝 支付宝