shangrui-hash Goto Github PK

403-fuzz

针对 403 页面的 fuzz 脚本

advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

assassingo

An extensible and concurrency pentest framework in Go, also with WebGUI. Feel free to CONTRIBUTE!

assetfinder

Find domains and subdomains related to a given domain

automated-blind-xss-search-for-burp-suite

BurpSuite插件，用于自动化执行blind-xss盲搜索。它能够执行主动和被动检查。

awvs-cli

awvs-cli

bbs-go

基于Golang的开源社区系统。

blind-xss-burp-match-and-replace

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugcrowd_university

Open source education content for the researcher community

bugrepoter_0x727

BugRepoter_0x727(自动化编写报告平台)根据安全团队定制化协同管理项目安全，可快速查找历史漏洞，批量导出报告。

burp-comment-extractor

burpsuite extension for extract html and js comment.

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

cewl

CeWL is a Custom Word List Generator

chaospy

Small Tool written based on chaos from projectdiscovery.io

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

codimd

CodiMD - Realtime collaborative markdown notes on all platforms.

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

crawlergo

A powerful browser crawler for web vulnerability scanners

crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

curl

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET and TFTP. libcurl offers a myriad of powerful features

cve-2021-3493

Ubuntu OverlayFS Local Privesc

cve-2022-23808

phpMyAdmin XSS

cvebase.com

cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs

davtest

davtest (improved)- Exploits WebDAV folders

ddddocr

带带弟弟 通用验证码识别OCR pypi版

dhlyk

大灰狼远控木马 V9.5 源码