c0d1007 Goto Github PK

-share_it

这个库用来分享一些东西

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aliyun-accesskey-tools

阿里云accesskey利用工具

allscanner

数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.

anapickle

Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.

angelsword

Python3编写的CMS漏洞检测框架

anhkgg-tools

Anhkgg's Tools

antsword-loader

AntSword 加载器

appsensor

A toolkit for building self-defending applications through real-time event detection and response

apt_report

Interesting apt report collection and some special ioc express

arp-scan-windows-

send arp request to whole specific LAN

as_webshell_venom

免杀webshell无限生成工具蚁剑版

aswan

陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

auto-earn

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

autosource

Automated SonarQube

autossrfdecete

SSRF自动化测试

awesome-cloud-native-security

cloud native security

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-risk-control

风控知识总结

awvs-decode

The best and easiest way to decode and repack AWVS scripts. AWVS 最好、最简单、最新的解码/再打包方法，仅15行代码！

axmlprinter

Library for parsing and printing compiled Android manifest files

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bilibili_fork

bilibili后台源码

biu

网络资产发现、漏洞扫描

biu-framework

Biu-framework🚀 Security Scan Framework For Enterprise Intranet Based Services(企业内网基础服务安全扫描框架)

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/etc) hourly and dumps them into the bounty-targets-data repo

burpsuite-extender

buy_pig_plan

电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护，佛系更新