passive-scanner 开源项目推荐（30 个）

whwlsfb /SpringSpider

Spring Actuator端点的BurpSuite被动扫描插件。

4n4nk3 /HikPwn

HikPwn，一个用 Python 3.8 编写的简单海康威视设备扫描器，具备基本漏洞扫描能力。

jiangsir404 /pbscan

基于burpsuite headless 的代理式被动扫描系统

orleven /Hamster

Hamster是基于mitmproxy开发的异步被动扫描框架，基于http代理进行被动扫描，主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能（开发中）。

ThestaRY7 /RouteVulScan-2.0

A passive recursive path probing extension for Burp Suite, built on the Montoya API with YAML rules and low-noise vulnerability detection.

Dont-Copy-That-Floppy /pyPhoneInfoga

原始 PhoneInfoga 的一个分支，以继续使用 Python

ab2pentest /BurpJSReconRadar

Burp Suite extension for passive JS reconnaissance - detects 1,600+ secret patterns, API keys, endpoints, and security misconfigurations in HTTP responses in real-time.

abrander /pnmap

Passive Network Mapper - like nmap, but passive

Skotizo /honeyScore

Scan a list of IP addresses for honeypots using the Shodan CLI

Scarbaci /PRECON

Passive Reconnaissance using Multicast Protocols

moeinfatehi /PassiveDigger

Burp Suite extension for passive vulnerability detection: flags SQL errors, reflected parameters (XSS), LFI hints, weak cookie flags and missing security headers.

krystianbajno /subduer

🥷 Subduer is a subdomain passive reconnaissance tool utilising Playwright and several online providers that gathers subdomains and generates wordlists and reports in multiple formats.

cybrdude /cve-2026-1731-scanner

Passive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.

YulinSec /t4scan

🔥A burp plugin for text4shell passive scan

heymaidel /RootWebAudit

Passive Next.js focused Web Security Auditor

anasbousselham /owlscan

Web Vulnerability Scanner

annmasha78-commits /passive-recon-extension

A high-performance Chrome Extension (Manifest V3) for automated passive web reconnaissance, header analysis, and PDF security report generation

nemmusu /passive-company-scanner

The Passive Company Scanner is a passive vulnerability scanning tool. By entering a company's name, it identifies associated IP addresses and gathers information on open ports, vulnerabilities, and more. It uses non-invasive techniques to map the attack surface without directly interacting with the targets.

Fly-Playgroud /VelaRBI

Lightweight RBI(Remote Browser Isolation)

Jezu-CI /AUSPEX

CMDB open source et passive pour l'IT et l'OT : inventaire des actifs et contrôle de la segmentation par écoute du réseau, sans agent. NetBox + Zeek. Preuves NIS2, DORA, IEC 62443.