outlaws-bai/Galaxy
outlaws-bai/Galaxy has 1,104 GitHub stars and 73 forks. GitHot measured 0 stars in 24 hours and 0 in 7 days. Last checked 2026-11-11 00:14 UTC. Last push 2026-08-24.
一个想让你测试加密流量像测试明文一样简单高效的 Burp 插件。 A Burp plugin that makes testing encrypted traffic as simple and efficient as testing plaintext.
Measured star growth
- in 24h
- 0
- in 7 days
- 0
- in 15 days
- Update delayed
- in 1 month
- Update delayed
Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.
README_EN.md
OriginalGalaxy
A Burp plugin that wants you to test encrypted traffic as simple and efficient as plaintext
中文 |
Wiki |
Download |
FAQ |
Issue
🔥 Key Features
- Automated decryption of traffic:After writing the custom hook, the plugin will automatically decrypt the traffic of subsequent agents.
- Support Burp multi module:Suitable for multiple modules of Burp, such as Intruder, Proxy, Repeater, and Scanner.
- Linkage with security tools:Support linkage with sqlmap and xray, allowing you to discover potential security vulnerabilities more efficiently.
- ...
🔒 Application Scenarios
- During penetration testing, it was discovered that the website's HTTP packets were encrypted.
- The encryption logic is relatively complex, such as encryption algorithm combinations, custom algorithms, and dynamic keys.
- I want to use a scanner that supports scanning plaintext requests and obtaining plaintext responses after the scanning request is sent.
- I can reverse engineer the encryption and decryption logic of the website (including calling client code through hooks) and have certain code capabilities.
- ...
🎥 Feature Showcase
Auto decryption
After startup, the proxy's request/response is automatically decrypted, and the decrypted request is forwarded to the repeater for sending, resulting in a plaintext response.

Linkage sqlmap
Right click to send the decrypted plaintext request to sqlmap, which can scan the plaintext request and obtain the decrypted response.

Linkage xray
Right click to send the decrypted plaintext request to xray, and xray can scan the plaintext request and obtain the decrypted response.

🚀 Installation Guide
If this project is helpful to you, please star it.
Download:Download
Install:Extensions -> Add -> Select File -> Next
Build: build.gradle -> shadowJar(gradlew shadowJar)
Precautions:
- Onboarding Guide
- Release precautions for the corresponding version.
- Burp version >=
v2023.10.3.7
🐛 Troubleshooting
Please read FAQ and Historical Issues first. If they cannot be resolved, you can submit an issue
🔯 Stars
🔗 Links
☕ Reference project
Explore related projects
codecrafters-io/build-your-own-x
Master programming by recreating your favorite technologies from scratch.
561,792 starspublic-apis/public-apis
A collective list of free APIs
498,143 starsmorluto/rea
Reverse engineer anything with agents, from app behavior down to native binaries.
452,106 starsopenclaw/openclaw
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
394,345 stars