Web Fuzzing Box - Web 模糊测试字典与一些Payloads

cli using wappalyzergo

🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe、disable ssl pinning

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

OneScan 是一款用于递归目录扫描的 BurpSuite 插件

List of XSS Vectors/Payloads

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Web 端反爬技术方案

Tools for analyzing EDR agents