ابزارهای امنیتی
ابزارهای متنباز توسعه داده شده برای جامعه امنیت.
swagger2burp
Import Swagger/OpenAPI (Swagger 2.0 and OpenAPI 3) and generate example HTTP requests per operation, ready to send to Repeater.
llm-security-checker
Comprehensive Security Assessment Tool for LLM Endpoints - 371 Attack Payloads, 100+ Prompt Injection Variants, 13 Security Tests, Parallel Scanning, Resume Capability
unicode-decoder-burp
Burp Suite extension that automatically converts escaped Unicode sequences (like \u0627\u06cc...) into readable characters inside all Burp tools (Proxy, Repeater, Intruder, etc.).
unicode-inline-decoder-burp
Burp Suite extension that intercepts the raw HTTP traffic (requests & responses), decodes any \uXXXX Unicode sequences, and then replaces the content before it reaches Burp’s UI.
https-finder
HTTPS Finder is a lightweight multithreaded Python tool designed for internal reconnaissance. It scans a list of IPs or CIDRs using Nmap to detect open web-related ports and then runs HTTPX to identify live HTTP/HTTPS services, grab titles, status codes, and technologies.
plugin-checker
Plugin Checker is a Python tool to enumerate WordPress plugins on target sites by checking for plugin `readme.txt` files and comparing detected versions with the latest versions from the WordPress Plugins API.
APIHunter
APIHunter is a fast, asynchronous API reconnaissance and route fuzzing tool. It discovers Swagger/OpenAPI documentation, Postman collections, GraphQL endpoints, and source maps, then fuzzes routes using built-in wordlists and dynamically generated patterns.
Similar-Domain-Bruteforcer
This script generates and resolves similar domain names based on a provided domain keyword. It can use TLD and compound name lists to generate domain combinations and check for active domains via DNS resolution.