Tsojan/TsojanScan

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1563 stars · 73 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TsojanScan is an integrated BurpSuite plugin for vulnerability detection that bundles multiple common vulnerability POCs into a single extension. It minimizes the number of HTTP requests needed to accurately detect vulnerabilities, with support for DNSLog-based out-of-band detection such as fast deserialization checks.

Use cases

• scan websites for known vulnerabilities through burp suite
• detect fast deserialization vulnerabilities with dnslog
• passively and actively probe web apps for common CVEs while browsing
• exclude certain urls from scanning with a blacklist
• verify fast version 1.2.80 vs 1.2.83 via dns callbacks

When to choose

• you already use BurpSuite and want an all-in-one vulnerability detection plugin
• you want minimal-packet POC-based detection of common web vulnerabilities
• you need DNSLog-based out-of-band checks like fast detection

When to avoid

• you need a standalone scanner outside of BurpSuite
• you require a formally licensed or enterprise-supported product
• you need comprehensive DAST coverage beyond the bundled POC set

Facets

plugin · maturity active

vulnerability-scanning security penetration-testing developer-tools security penetration-testing developer-tools web-development cross-platform jvm burpsuite burp-extension vulnerability-detection poc dnslog fast web-security-scanner

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Tsojan/TsojanScan")