Burp Suite의 오픈소스 대체
Burp Suite을 대체하는 무료·오픈소스·다운로드 가능한 선택지
Interactive TLS intercepting HTTP proxy for testing — An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
대체: Burp Suite、Charles Proxy、Fiddler
Web application security scanner — The ZAP by Checkmarx Core project
대체: Burp Suite
Network execution tool for security testing — The Network Execution Tool
대체: Burp Suite
CLI tool to screenshot sites and gather server info — EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
대체: Burp Suite、Nuclei
Automated command injection detection and exploit tool — Automated All-in-One OS Command Injection Exploitation Tool
대체: Burp Suite、Commix、Nuclei
Generate Gopher payloads to exploit SSRF — This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
대체: Burp Suite
AFL fuzzer fork for Windows binaries — A fork of AFL for fuzzing Windows binaries
대체: Burp Suite、IDA Pro
Automated web application security testing tool — The Swiss Army knife for automated Web Application Testing
대체: Burp Suite
Python web vulnerability scanner — Web vulnerability scanner written in Python3
대체: Burp Suite、Acunetix
Comprehensive web asset and vulnerability scanner — python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
대체: Burp Suite、Acunetix、Nessus
Web vulnerability scanner and auto-exploiter — X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
대체: Burp Suite
Local HTTP traffic workbench — Scriptable local traffic workbench for inspecting, intercepting, replaying, and rewriting HTTP/HTTPS and WebSocket traffic.