hub / github.com/NeoTheCapt/PowerScanner

github.com/NeoTheCapt/PowerScanner @1.1.3

Chat with this repo

repository ↗ · DeepWiki ↗ · release 1.1.3 ↗ · + Follow

600 symbols 1,137 edges 86 files 328 documented · 55%

What it actually does AI analysis from the code graph — generated when you open this

loading…

README

PowerScanner

面向HW的红队半自动扫描器(Burp插件)
适合有经验的渗透测试人员。
注：误报率高！！！所有报告结果需经手动手动确认。
By Brian.W AKA BigCHAN

Features

通过缩短payload长度、降低发包数量提高对WAF的隐蔽性，同时提高误报率。
所有测试项不依赖回显，发现隐蔽漏洞
BypassWAF:各种Headers随机化(IP随机化、Cookie清空、User-agent随机化、HOST随机化)
BypassWAF:锚点随机化，随机锚点{{|RANDOMSTR|}},{{|RANDOMINT|}}
BypassWAF:json unicode编码

Check list

注意：所有检测项只包含无害化PoC，不包含利用程序 * 扫描Sql注入 * 扫描命令注入 * 扫描敏感文件 * 扫描路径穿越 * 报告敏感参数(参数明看起来可能是漏洞点) * fastjson检测 * log4j检测 * 路由请求到第三方工具，比如xray、zaproxy

TODO

不增加发报量的前提下，修改对照逻辑，降低误报率
敏感文件扫描按照目录扫描(最高遍历一级目录)
BypassWAF:膨胀Post body
BypassWAF:膨胀Get URL
CMS识别

How To Use

加载插件，设置主动在线扫描，打开浏览器，设置代理到burp，剩下的就是点点点就行了。

主动扫描

(optional) 为了控制发包数目，防止被WAF封，取消勾选其他所有主动扫描插件
加载插件
新建在线主动扫描

Bypass WAF

扫描结果

Extension points exported contracts — how you extend this code

IScannerCheck (Interface)

Extensions can implement this interface and then call IBurpExtenderCallbacks.registerScannerCheck() to regi [4 implementers]

src/main/java/burp/IScannerCheck.java

ITab (Interface)

This interface is used to provide Burp with details of a custom tab that will be added to Burp's UI, using a method such [2 …

src/main/java/burp/ITab.java

IBurpExtender (Interface)

All extensions must implement this interface. Implementations must be called BurpExtender, in the package burp, must be [2 …

src/main/java/burp/IBurpExtender.java

IScanIssue (Interface)

This interface is used to retrieve details of Scanner issues. Extensions can obtain details of issues by registering an [2 …

src/main/java/burp/IScanIssue.java

IProxyListener (Interface)

Extensions can implement this interface and then call IBurpExtenderCallbacks.registerProxyListener() to reg [2 implementers]

src/main/java/burp/IProxyListener.java

Core symbols most depended-on inside this repo

toString

called by 80

src/main/java/com/r4v3zn/fofa/core/DO/User.java

setText

called by 36

src/main/java/burp/ITextEditor.java

printOutput

called by 25

src/main/java/burp/IBurpExtenderCallbacks.java

setValue

called by 22

src/main/java/BrianW/AKA/BigChan/Tools/Config.java

getHttpService

called by 19

src/main/java/burp/IScanIssue.java

getResponse

called by 19

src/main/java/burp/IHttpRequestResponse.java

getRandomString

called by 17

src/main/java/BrianW/AKA/BigChan/Tools/Utils.java

getAttributeValue

called by 17

src/main/java/burp/IResponseVariations.java

Shape

Method 515

Class 42

Interface 42

Enum 1

Languages

Java100%

Modules by API surface

src/main/java/burp/IBurpExtenderCallbacks.java91 symbols

src/main/java/BrianW/AKA/BigChan/Tools/Config.java47 symbols

src/main/java/BrianW/AKA/BigChan/GUI/PowerPannel.java28 symbols

src/main/java/BrianW/AKA/BigChan/Tools/Utils.java24 symbols

src/main/java/com/r4v3zn/fofa/core/DO/User.java23 symbols

src/main/java/burp/IExtensionHelpers.java23 symbols

src/main/java/com/r4v3zn/fofa/core/DO/FofaData.java14 symbols

src/main/java/BrianW/AKA/BigChan/Tools/ProxiedHttpsConnection.java14 symbols

src/main/java/BrianW/AKA/BigChan/Tools/CustomScanIssue.java13 symbols

src/main/java/burp/IScanIssue.java12 symbols

src/main/java/BrianW/AKA/BigChan/Tools/HitRst.java12 symbols

src/main/java/burp/IHttpRequestResponse.java11 symbols

For agents

$ claude mcp add PowerScanner \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact