lvir0 Goto Github PK

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

aquatone

A Tool for Domain Flyovers

awesome-asset-discovery

List of Awesome Asset Discovery Resources

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awesomexss

Awesome XSS stuff

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

bb-reports-templates

My small collection of reports templates

blasting_dictionary

爆破字典

bugcrowd_university

Open source education content for the researcher community

burpcollector

通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。

burpfakeip

一个用于伪造ip地址进行爆破的Burp Suite插件

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件、汉化等相关教程，欢迎添砖加瓦

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

collection-document

Collection of quality safety articles

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

dictionaries

Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks

disclose

bug-bounty-list

domain_hunter

A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

gobuster

（目录、文件、dns发现工具）Directory/File, DNS and VHost busting tool written in Go

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

hunt

jdsrc-small-classroom

京东SRC小课堂系列文章

jsparser

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

linkfinder

A python script that finds endpoints in JavaScript files

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

navicat-keygen

A keygen for Navicat