lengyun112233 Goto Github PK

360tcb

active-directory-pentest-notes

个人域渗透学习笔记

ahrid

AHRID - Analysis Hacker's Real-ID Platform 黑客攻击画像分析系统

anhkgg-tools

Anhkgg's Tools

authz

blockchainsecuritytutorial

NoneAge Blockchain Security Tutorial

c-jwt-cracker

JWT brute force cracker written in C

exploits

Pwn stuff.

fanhaodaquan

番号大全。

filescan

FileScan: 敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

honggfuzz

Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)

hunter

Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jav-scraper-and-rename-local-files

JAV影片信息整理工具，抓取元数据nfo，自定义重命名文件(夹)，下载fanart裁剪poster，为emby、kodi、极影派铺路。jav-scrapy 老司机 javbus

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

openrasp-iast

IAST 灰盒扫描工具

pret

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

pteye

Phantom eye——A passive business logic vulnerability auditing tool

sts2g

Struts2漏洞扫描Golang版. Struts2 Scanner Golang Version

subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)

webcgi-exploits

Multi-language web CGI interfaces exploits.

wfuzz

Web application fuzzer

wooyun-payload

从wooyun中提取的payload，以及burp插件