worwick Goto Github PK

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awvs-13-scan-plus

This is a companion software based on the Acunetix Web Vulnerability Scanner 12、13、14 (AWVS 12、AWVS 13、AWVS 14) scanning engine.

awvs13_batch_py3

针对 AWVS扫描器开发的批量扫描脚本，支持联动xray、burp、w13scan等被动批量

chrome-0day

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

dbj

大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

ffuf

Fast web fuzzer written in Go

fofa_viewer

A simple and easy-to-use fofa client, written with JavaFX, easy to use across platforms

fofascan

gongkaishouji

公开收集所用

liqunkit

log4j2burpscanner

CVE-2021-44228，log4j2 burp插件 Java版本，dnslog选取了非dnslog.cn域名，可自定义ceye.io

pochouse

POC&EXP仓库、hvv弹药库、Nday、1day

pppxray

Xray批量化自动扫描

sharpavkb

Windows杀软对比和补丁号对比

spring-core-rce

Spring Core RCE

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

xray-crack

xray社区高级版证书生成，仅供学习研究，正常使用请支持正版