whizsail Goto Github PK

-v1.0

冰蝎v1.0

0day

各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

2021_hvv

2021 hw

3xp10it

403fuzzer

Fuzz 403/401ing endpoints for bypasses

404starlink-project

Focus on promoting the evolution of tools in different aspects of security research.专注于推动安全研究各个领域工具化.

520apkhook

把msf生成的安卓远控附加进普通的app中，并进行加固隐藏特征。可以绕过常见的手机安全管家。

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

active-directory-pentest-notes

个人域渗透学习笔记

activedirectoryattacktool

ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is intended to be utilized using a set of known credentials against the host.

ad-penetration-testing-tools

域渗透工具

adlab

Custom PowerShell module to setup an Active Directory lab environment to practice penetration testing.

advanced-go-programming-book

:books: 《Go语言高级编程》开源图书，涵盖CGO、Go汇编语言、RPC实现、Protobuf插件实现、Web框架实现、分布式系统等高阶主题(完稿)

aggressorscripts_0x727

Cobalt Strike AggressorScripts For Red Team

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

antcode

Linux/Mac下的代碼審計工具

anti-av

Resources About Anti-Virus and Anti-Anti-Virus, including 200+ tools and 1300+ posts

anti-honeypot

一款可以检测WEB蜜罐并阻断请求的Chrome插件

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

anyproxy

Proxy server supporting http/ssh/socks4/socks5/shadowsocks on port

apache-solr-rce

Apache Solr Exploits 🌟

apkleaks

Scanning APK file for URIs, endpoints & secrets.

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

aquatone

A Tool for Domain Flyovers

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

artifact32

THIS REPO IS PART OF WHAT ORCA TOLD ME TO UPLOAD

artifact64

THIS REPO IS PART OF WHAT ORCA TOLD ME TO UPLOAD

asmodeus-stealer

The malware is un-killable and fully undetectable by antivirus, developed by Kingsman. It steals the browser passwords, Discord Tokens & Telegram data and sends it to drop-box using dropbox-Api

assetfinder

Find domains and subdomains related to a given domain