medasz Goto Github PK

bhg

Code samples for No Starch Press Black Hat Go

binabsinspector

BinAbsInspector: Vulnerability Scanner for Binaries

biu

网络资产发现、漏洞扫描

bkscanner

BkScanner 分布式、插件化web漏洞扫描器

black-hat-go

《Black.Hat.Go》中文翻译

black-widow

GUI based offensive penetration testing tool (Open Source)

blackmamba

C2/post-exploitation framework

blur-admin

AngularJS Bootstrap Admin Panel Framework

bob

Bob 是一款 Mac 端翻译软件，支持划词翻译、截图翻译以及手动输入翻译。

brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

brutus

A Python-powered exploitation framework and botnet.

bufferfly

攻防演习/渗透测试资产处理小工具，对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

byob

BYOB (Build Your Own Botnet)

caidao-official-version

**菜刀官方版本，拒绝黑吃黑，来路清晰

caldera

Automated Adversary Emulation Platform

cansina

Web Content Discovery Tool

capa

The FLARE team's open-source tool to identify capabilities in executable files.

captfencoder

CaptfEncoder是一款可扩展跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、非对称加密、特殊编码、杂项等工具，并聚合各类在线工具。

cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

chaos

:fire: CHAOS is a Remote Administration Tool that allow generate binaries to control remote operating systems.

chashell

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

chip

a simple tool to detect potential security threat in php code

chkrootkit

This program locally checks for signs of a rootkit. 'Forked' to fix false-positive for SucKIT rootkit

chrome-plugin-demo

《Chrome插件开发全攻略》配套完整Demo，欢迎clone体验

clean-architecture-zh

《架构整洁之道》中文翻译

client-go

Go client and SDK for Falco

cmdb

cms-hunter

CMS漏洞测试用例集合