test502git Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

360quake

360 QuakeAPI批量查询工具

3klcon

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

404starlink2.0-galaxy

404StarLink Project 2.0 - 推荐真正优质、有意义、有趣、坚持维护的开源项目

7kbscan-rdp-sniper

一款有图形界面的RDP(3389)口令检测工具

aboutsecurity

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apkvulcheck

This is a tool to help androidcoder to check the flaws in their projects.

awvs-13-scan-plus

This is a companion software based on the Acunetix Web Vulnerability Scanner 13 (AWVS13) scanning engine.

awvs14-scan

针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项，支持联动xray、burp、w13scan等被动批量

batch-webtitle-get

bbscan

A fast vulnerability scanner

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti and Immunefi!

blasting_dictionary

爆破字典

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bountyhunterinchina

重生之我是赏金猎人系列，分享自己和团队在SRC、项目实战漏洞测试过程中的有趣案例

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

burpextender

captcha_cracker

卷积神经网络实现的验证码识别

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

cobra

Source Code Security Audit (源代码安全审计)

code6

码小六 - GitHub 代码泄露监控系统

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

cve-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

cve-2021-26084_poc

cve-2021-40444

CVE-2021-40444 PoC

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

dedecmscan

织梦全版本漏洞扫描

dontgo403

Tool to bypass 40X response codes.