Ghidra is a software reverse engineering (SRE) framework

Dex to Java decompiler

🍬A set of tools that keep Java sweet.

Tools to work with android .dex and java .class files

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

Jar Analyzer - 一个 JAR 包 GUI 分析工具，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索，紧跟 AI 技术发展，支持 MCP 调用，支持 n8n 工作流

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

Plugin for JADX to integrate MCP server

The new bridge between Burp Suite and Frida!

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件

OneScan 是一款用于递归目录扫描的 BurpSuite 插件

将安卓远控Apk附加进普通的App中，运行新生成的App时，普通App正常运行，远控正常上线。Attach the Android remote control APK to a regular app. When the newly generated app is launched, the regular app operates as normal while the remote …

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).

HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

基于burpsuite的资产分析工具

JDBC Connection URL Attack

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

A natural evolution of Burp Suite's Repeater tool

android虚拟定位应用，基于系统api，支持钉钉打卡

FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application and matches their occurrences in the responses.

SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens

CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

Burp Suite Extension - Trigger actions and reshape HTTP request/response and WebSocket traffic using configurable rules

Burp被动扫描流量转发插件