Skip to content
Projects

outlaws-bai/Galaxy has 1,104 GitHub stars and 73 forks. GitHot measured 0 stars in 24 hours and 0 in 7 days. Last checked 2026-11-11 00:14 UTC. Last push 2026-08-24.

How these counts are measured

一个想让你测试加密流量像测试明文一样简单高效的 Burp 插件。 A Burp plugin that makes testing encrypted traffic as simple and efficient as testing plaintext.

Measured star growth

in 24h
0
in 7 days
0
in 15 days
Update delayed
in 1 month
Update delayed

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

README_EN.md

Original

Galaxy

A Burp plugin that wants you to test encrypted traffic as simple and efficient as plaintext

releases downloads begin last commit GitHub stars

中文 | Wiki | Download | FAQ | Issue

🔥 Key Features

  • Automated decryption of traffic:After writing the custom hook, the plugin will automatically decrypt the traffic of subsequent agents.
  • Support Burp multi module:Suitable for multiple modules of Burp, such as Intruder, Proxy, Repeater, and Scanner.
  • Linkage with security tools:Support linkage with sqlmap and xray, allowing you to discover potential security vulnerabilities more efficiently.
  • ...

🔒 Application Scenarios

  • During penetration testing, it was discovered that the website's HTTP packets were encrypted.
  • The encryption logic is relatively complex, such as encryption algorithm combinations, custom algorithms, and dynamic keys.
  • I want to use a scanner that supports scanning plaintext requests and obtaining plaintext responses after the scanning request is sent.
  • I can reverse engineer the encryption and decryption logic of the website (including calling client code through hooks) and have certain code capabilities.
  • ...

🎥 Feature Showcase

Auto decryption

After startup, the proxy's request/response is automatically decrypted, and the decrypted request is forwarded to the repeater for sending, resulting in a plaintext response.

hook

Linkage sqlmap

Right click to send the decrypted plaintext request to sqlmap, which can scan the plaintext request and obtain the decrypted response.

linkage-sqlmap

Linkage xray

Right click to send the decrypted plaintext request to xray, and xray can scan the plaintext request and obtain the decrypted response.

linkage-xray

🚀 Installation Guide

If this project is helpful to you, please star it.

Download:Download

Install:Extensions -> Add -> Select File -> Next

Build: build.gradle -> shadowJar(gradlew shadowJar)

Precautions:

🐛 Troubleshooting

Please read FAQ and Historical Issues first. If they cannot be resolved, you can submit an issue

🔯 Stars

🔗 Links

Proving ground

BurpDownload

JDK21Download

☕ Reference project

https://github.com/gh0stkey/HaE

https://github.com/c0ny1/sqlmap4burp-plus-plus

Explore related projects