atomxw Goto Github PK

revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

rizin

UNIX-like reverse engineering framework and command-line toolset.

routersploit

Exploitation Framework for Embedded Devices

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

rufus

The Reliable USB Formatting Utility

rules

Repository of yara rules

rustdesk

Open source virtual / remote desktop infrastructure for everyone! The open source TeamViewer alternative. Display and control your PC and Android devices.

sage

Mirror of the Sage source tree -- please do not submit PRs here -- everything must be submitted via https://trac.sagemath.org/, though this may change soon! (see https://trac.sagemath.org/ticket/30363)

savvycan

QT based cross platform canbus tool

scalpel

scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。 原理：https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog

screenshotbof

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sectool

Cybersecurity tool repository / Wiki 收录常用 / 前沿 的安全工具以及其文档，致力于减少工具收藏行为ww

security

📖 Security 是一个由个人维护的安全知识库，包括但不限于 WriteUp、信息收集、渗透测试

sendmail

批量发送钓鱼邮箱

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

shadowbroker

The Shadow Brokers "Lost In Translation" leak

shellcodeloader

shellcodeloader

shiroattack2

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

shiroexp

shiro综合利用工具

shiroscan2

基于BurpShiroPassiveScan修改增加了Xray回显链生成

shuize_0x727

信息收集自动化工具

silenteye

SilentEye is a cross-platform application design for an easy use of steganography

spring-cloud-gateway-cve-2022-22947

CVE-2022-22947

springboot-scan

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

springboot-scan-gui

springscan

SpringScan 漏洞检测 Burp插件

springspider

Spring Actuator端点的BurpSuite被动扫描插件。

sqlitebrowser

Official home of the DB Browser for SQLite (DB4S) project. Previously known as "SQLite Database Browser" and "Database Browser for SQLite". Website at:

sqlmap

Automatic SQL injection and database takeover tool