CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways. 信息洞察,智探千方!
Las características principales de gh0stkey/caa son: Burp Suite Extensions, Data Extraction and Analysis.
Las alternativas de código abierto para gh0stkey/caa incluyen: shuanx/burpapifinder — 攻防演练过程中,我们通常会用浏览器访问一些资产,但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等,该插件能让我们发现未授权/敏感信息/越权/登陆接口等。. gh0stkey/hae — HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within… elespike/burp-cph — 1. Download the latest release file; e.g., CustomParameterHandler3.0.py 2. Under Extender > Options > Python… 0x727/bypasspro. akabe1/upnp-bhunter — Burp Suite Extension useful to inspect UPnP security. adriancitu/burp-tabnabbing-extension — This is a Burp Suite Pro extension that is able to find the “Reverse Tabnabbing” attack. For more information about…
HaE is a network traffic analysis tool designed to extract, classify, and highlight specific data fragments within network messages and HTTP traffic. It functions as an HTTP data extractor and traffic content filter, utilizing a network metadata aggregator to centralize highlighted data fragments and annotations for analysis. The tool identifies high-value network packets by mapping classification results to visual color markers and employs a modular classification system to isolate data fragments from binary or text streams. It distinguishes the severity of matched data by piping extracted c
攻防演练过程中,我们通常会用浏览器访问一些资产,但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等,该插件能让我们发现未授权/敏感信息/越权/登陆接口等。
1. Download the latest release file; e.g., CustomParameterHandler3.0.py 2. Under Extender > Options > Python Environment, point Burp to the location of your copy of Jython's standalone .jar file. a. If you don't already have Jython's standalone .jar file, download it here. 3. Finally, add…