有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Hack the World using Termux

Quick SQLMap Tamper Suggester

DudeSuite Web Security Tools

Automatic SQL injection with Charles and sqlmap api

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

市场上虽然存在大量的网络安全工具和软件，但它们大多针对某一特定领域或功能，缺乏一个统一的、集成的、易于使用的综合工具平台。这导致参赛者在CTF竞赛中需要频繁切换不同的工具，不仅降低了工作效率，还增加了操作失误的风险。由gitee转发 ↓

This repository contains full code examples from the book Gray Hat C#

基于官版本 SQLMAP 进行人工汉化，并提供GUI界面及多个自动化脚本

XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

Bypass WAF SQL Injection SQLMAP

🧠 Talvez essa seja o caminho mais apropriado para quem quer sair da Matrix e conhecer de verdade como funciona o interminável campo de batalha dentro da internet. 🧠

SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. It filters URLs to identify those with parameters susceptible to SQL injection formats and then performs injection attacks. These attacks include pattern matching, error analysis, and timing attacks.

smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter

An awesome resource listing and explaining various commonly used *nix commands

可能是最完整的 sqlmap 中文文档。

sqlmap GUI using PyGObject(gtk+3).

Linux Cheat Sheet