Open-Source-Alternativen zu Burp Suite

Interactive TLS intercepting HTTP proxy for testing — An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

↔ Alternative zu Burp Suite、Charles Proxy、Fiddler

Web application security scanner — The ZAP by Checkmarx Core project

↔ Alternative zu Burp Suite

Network execution tool for security testing — The Network Execution Tool

↔ Alternative zu Burp Suite

CLI tool to screenshot sites and gather server info — EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

↔ Alternative zu Burp Suite、Nuclei

Automated command injection detection and exploit tool — Automated All-in-One OS Command Injection Exploitation Tool

↔ Alternative zu Burp Suite、Commix、Nuclei

Generate Gopher payloads to exploit SSRF — This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

↔ Alternative zu Burp Suite

AFL fuzzer fork for Windows binaries — A fork of AFL for fuzzing Windows binaries

↔ Alternative zu Burp Suite、IDA Pro

Automated web application security testing tool — The Swiss Army knife for automated Web Application Testing

↔ Alternative zu Burp Suite

Python web vulnerability scanner — Web vulnerability scanner written in Python3

↔ Alternative zu Burp Suite、Acunetix

Comprehensive web asset and vulnerability scanner — python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

↔ Alternative zu Burp Suite、Acunetix、Nessus

Web vulnerability scanner and auto-exploiter — X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

↔ Alternative zu Burp Suite

Lightweight website vulnerability scanner — 开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

↔ Alternative zu Nessus、Burp Suite、Acunetix

Browser crawler built for security vulnerability scanning

↔ Alternative zu Burp Suite

Local HTTP traffic workbench — Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.

↔ Alternative zu Charles Proxy、Burp Suite