Burpsuite 重要插件

1.Gason：Burpsuite-sqlmap插件，該插件可以讓burp與sqlmap輕松對接，深度發掘SQL注入漏洞.

 

2.fuzzdb：fuzzing測試數據庫，開源，深度測試SQL注入，xss，文件上傳/解析等漏洞（結合intruder使用）.

 

3.bypasswaf：讓你輕松繞過waf防御（不要迷信waf）.

 

Reference：

A.gason

http://www.myhack58.com/Article/html/3/7/2014/45418.htm

https://code.google.com/archive/p/gason/downloads

B.fuzzdb

http://www.freebuf.com/sectool/6181.html

https://github.com/rustyrobot/fuzzdb

C.waf baypass

http://www.wooyun.org/whitehats/MayIKissYou

https://github.com/codewatchorg/bypasswaf