h3llozy Goto Github PK

across

Across the Great Wall we can reach every corner in the world

adape-script

Active Directory Assessment and Privilege Escalation Script

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

android_trojan

Android trojan with abilities of recording calls, live mic streaming , remote root commands execution and other

angelsword

Python3编写的CMS漏洞检测框架

aquatone

A Tool for Domain Flyovers

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

blackeye

The most complete Phishing Tool, with 32 templates +1 customizable

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

caller

twilio, caller

chartkick.py

Create beautiful Javascript charts with minimal code

cintruder

Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.

collection-document

Collection of quality safety articles

crackmapexec

A swiss army knife for pentesting networks

cred_scanner

A simple file-based scanner to look for potential AWS access and secret keys in files

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

cve-2018-4878

CVE-2018-4878 样本

cve-2018-4879

cve-2018-8120

CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7

cve-search

cve-search - a tool to perform local searches for known vulnerabilities

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

decrypt_weblogic_password

搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。

dirhunt

Find web directories without bruteforce

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

elasticsearch-file-importer

Python command line script for importing data from CSV files, log files, and JSON files into Elasticsearch.

eventlogedit-evtx--evolution

Remove individual lines from Windows XML Event Log (EVTX) files