coffeehb Goto Github PK

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

activescanplusplus

ActiveScan++ Burp Suite Plugin

after-deserialization-attack

Java After-Deserialization Attack

albatar

Albatar is a SQLi exploitation framework in Python

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

altman

the cross platform webshell tool in .NET

androidreverseengineering

安卓逆向工程 ELFRead、Frida、FridaDump、DexDump、SoDump、Ghidra、IdaPro、GDA、Jadx、Objection、Xposed...

angelsword

Python3编写的CMS漏洞检测框架

ant

蚁逅 docker 版

apkbinder

Automatic backdooring apk with meterpreter (PoC)

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

as_bugscan

通过 Webshell 创建 BugScan 节点(需要目标支持 Python2.7)

att-ck-cn

ATT&CK实操

authmatrix

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.

auto-root-exploit

Auto Root Exploit Tool

autodecoder

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

autogetshell

phpstudy批量检测mysql弱口令

autohookspider

将自动爬虫的结果判断是否属于hooks，并不断抓取url爬啊爬。

awesome-adb

ADB Usage Complete / ADB 用法大全

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 500+ posts and videos.

awesome-java-cn

Java资源大全中文版，包括开发库、开发工具、网站、博客、微信、微博等，由伯乐在线持续更新。

b374k

PHP Webshell with handy features

badsamba

baiduyun-brute

多线程百度云(私密分享)密码爆破工具

bannerscan

http://x0day.me/archives/bannerscan-py.html

batch-java-decompile

This is a small tool which can be used to decompile jars in bulk. Sometimes maybe helpful:-)

blade

A webshell connection tool with customized WAF bypass payloads

blasting_dictionary

爆破字典

brodomain

兄弟域名查询

brosec

Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.