namespacegit Goto Github PK

autofindxssandcsrf

自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)

bbscan

A tiny Batch weB vulnerability Scanner

blasting_dictionary

爆破字典

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

direct-style-transfer

dirfuzz

多线程网站目录穷举扫描

docker-blxr

Docker contained BlueLotus_XSSReceiver

electronic-wechat

:speech_balloon: A better WeChat on macOS and Linux. Built with Electron by Zhongyi Tong.

findtrip

机票爬虫（去哪儿和携程网）。flight tickets multiple webspider.(scrapy + selenium + phantomjs + mongodb)

htpwdscan

A python HTTP weak pass scanner

iis_shortname_scanner

an IIS shortname Scanner

ipproxys

IPProxys代理池项目，提供代理ip

learngit

mspider

Spider

nishang

Nishang - PowerShell for penetration testing and offensive security.

passive_scan

基于http代理的web漏洞扫描器的实现

poc-t

渗透测试脚本调用框架

pocsuite

Pocsuite 是知道创宇安全研究团队打造的一款开源的远程漏洞测试框架，Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

portnine-free-bootstrap-theme

Free bootstrap theme

portscan

push

powercat

netshell features all in version 2 powershell

python_poc

一款python编写的Web安全检测PoC&&EXP框架

somepoc

各种漏洞poc、Exp的收集

sqlmap

Automatic SQL injection and database takeover tool

sqlmapapi--go--

sqlmapapi GO 版

sqlmapapi_pi

利用sqlmapapi进行批量检测sql注入

sqlmaptamper

测试过程中需要绕过各种waf或者全局的过滤机制，因此编写各种适合的tamper。

subdomainsbrute

A simple and fast sub domain brute tool for pentesters