h3len Goto Github PK

exp

收集各种各样的exp

f-scrack

对各类服务进行弱口令检测的脚本

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fortipy

Fortify's FPR file explorer library

free-proxy-list

Free proxy servers list / Updated hourly!

fuzz_dict

常用的一些fuzz及爆破字典，目前仅有账号和密码分类，欢迎大神继续提供新的字典及分类。

getproxy

getproxy 是一个抓取发放代理网站，获取 http/https 代理的程序

githack

A `.git` folder disclosure exploit

godofhacker

黑客神器

gourdscan

gourdscanv2

被动式漏洞扫描系统

h3len.github.io

hackertoolbox

hackhttp

Hackhttp is an HTTP library, written in Python.

handson-ml

A series of Jupyter notebooks that walk you through the fundamentals of Machine Learning and Deep Learning in python using Scikit-Learn and TensorFlow.

hangzhouyunqi2017ppt

hashview

A web front-end for password cracking and analytics

htpwdscan

A python HTTP weak pass scanner

htran

lcx.exe cross-platform version

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

iis_shortname_scanner

an IIS shortname Scanner

insightscan

A single file multithread portscanner in python

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

kmspico_v10.2.0

ignore the virus report!

lalascan

自主开发的分布式web漏洞扫描框架，集合webkit爬虫，Subdomain子域名发现，sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台

lazagne

Credentials recovery project

lcx

lcx-1

端口转发工具

lcx-for-linux

Source code of lcx for linux, which allows you implement "port transfer". [Downloaded from somewhere else]