7shad0w Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

7shad0w.github.io

7Shad0w

activemq-rce

ActiveMQ RCE (CVE-2023-46604) 漏洞利用工具

apestoreassistant

Reduce the waiting time

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

atexec

Fileless atexec, no more need for port 445

blasting_dictionary

爆破字典

bounceback

↕️🤫 Stealth redirector for your red team operation security

cardinal

CTF🚩 AWD (Attack with Defense) 线下赛平台 / AWD platform

codeql-uboot

doom

DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器

dtcms

DTcms开源框架

enterprise_-security_tools

企业安全建设中用到的开源or“免费”的工具

fuzz-dicts

自己收集整理的一些fuzz及密码爆破字典

fuzz-test-and-bruteforce-dictionary

一些平时自己整理的fuzz字典和爆破字典

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

goflsh

一款办公应用云凭证利用工具

hexo-theme-next

Elegant theme for Hexo.

injectlib

基于Ruby编写的命令行注入版本

iphoneorder.2023

2023版 iPhone 自动抢购插件，适用 Chrome/Edge

jetbrain-activation-code

jetbrain software全家桶激活码activation code, including intellij idea，pycharm，datagrip, webstorm...

jetbrain-activation-code-1

jetbrain software全家桶激活码activation code, including intellij idea，pycharm，datagrip, webstorm...

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massexpconsole

adding more exploits and tools

oneforall

OneForAll是一款功能强大的子域收集工具

onexss

One XSS 是一款基于Cloudflare Pages/D1/KV实现的在线XSS平台,可自定义模块和项目,用于帮助渗透测试工程师进行XSS漏洞验证.

paramspider

Mining parameters from dark corners of Web Archives

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pocsuite

Pocsuite 是知道创宇安全研究团队打造的一款开源的远程漏洞测试框架，Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.