hub / github.com/Daybr4ak/ShiroScan

github.com/Daybr4ak/ShiroScan @0.5

Chat with this repo

repository ↗ · DeepWiki ↗ · release 0.5 ↗ · + Follow

334 symbols 384 edges 42 files 303 documented · 91%

What it actually does AI analysis from the code graph — generated when you open this

loading…

README

ShiroScan

burp插件 Shiroscan 主要用于框架、无dnslog key检测

无dnslog检测基于https://mp.weixin.qq.com/s/do88_4Td1CSeKLmFqhGCuQ

使用截图

将ShiroScan.jar导入burp，该插件是被动扫描，扫描成功的结果会输出到图形界面中

同时在burp的issue里也会输出相应的详情信息

版本更新

修复响应中包含多个rememberMe=deleteMe时漏报的问题
将检测成功的cookie信息同步与request包中
修复检测完key后列表才会显示,现在检测到为shiro框架后回先将url添加到列表中，等到key检测完再将key检测的结果更新

师傅们在使用过程中遇到问题请及时反馈。感谢。

Extension points exported contracts — how you extend this code

ITab (Interface)

This interface is used to provide Burp with details of a custom tab that will be added to Burp's UI, using a method such [2 …

src/main/java/burp/ITab.java

IScannerCheck (Interface)

Extensions can implement this interface and then call IBurpExtenderCallbacks.registerScannerCheck() to regi [2 implementers]

src/main/java/burp/IScannerCheck.java

IBurpExtender (Interface)

All extensions must implement this interface. Implementations must be called BurpExtender, in the package burp, must be [2 …

src/main/java/burp/IBurpExtender.java

IScanIssue (Interface)

This interface is used to retrieve details of Scanner issues. Extensions can obtain details of issues by registering an [2 …

src/main/java/burp/IScanIssue.java

IMessageEditorController (Interface)

This interface is used by an IMessageEditor to obtain details about the currently displayed message. Extens [2 implementers]

src/main/java/burp/IMessageEditorController.java

Core symbols most depended-on inside this repo

getRememberMeNumber

called by 4

src/main/java/burp/BurpExtender.java

getRequest

called by 4

src/main/java/burp/IHttpRequestResponse.java

getResponse

called by 4

src/main/java/burp/IHttpRequestResponse.java

analyzeResponse

called by 3

src/main/java/burp/IExtensionHelpers.java

getHttpService

called by 3

src/main/java/burp/IScanIssue.java

getHost

called by 2

src/main/java/burp/IHttpService.java

getPort

called by 2

src/main/java/burp/IHttpService.java

FindKey

called by 2

src/main/java/burp/BurpExtender.java

Shape

Method 288

Interface 41

Class 5

Languages

Java100%

Modules by API surface

src/main/java/burp/IBurpExtenderCallbacks.java90 symbols

src/main/java/burp/BurpExtender.java40 symbols

src/main/java/burp/IExtensionHelpers.java22 symbols

src/main/java/burp/IScanIssue.java12 symbols

src/main/java/burp/IHttpRequestResponse.java11 symbols

src/main/java/burp/ITextEditor.java9 symbols

src/main/java/burp/IScanQueueItem.java8 symbols

src/main/java/burp/IParameter.java8 symbols

src/main/java/burp/IMessageEditorTab.java8 symbols

src/main/java/burp/IResponseInfo.java7 symbols

src/main/java/burp/IRequestInfo.java7 symbols

src/main/java/burp/IMessageEditor.java7 symbols

For agents

$ claude mcp add ShiroScan \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact