xiju2003 Goto Github PK

sn1per

Automated Pentest Recon Scanner

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

some_script

工作半年多了，陆陆续续写的一些辣鸡脚本。用来做个记录吧，以后也接着更新

sosrp

SOSRP Security 安全平台

sourceleakhacker

一个多线程WEB源码泄漏检测工具

splunk-class-httpevent

Python class to submit events to Splunk HTTP Event Collector

spring-boot-actuator-exploit

Spring Boot Actuator (jolokia) XXE/RCE

spring-core-rce

about spring core rce

spring4shell

spring4shell POC

spring4shell-1

一个Spring4Shell 被动式检测的Burp插件

spring4shell-scan

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

spring_all_reachable

Spring漏洞综合利用工具

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

springcore_detect

spring-core漏洞自检工具

springscan

SpringScan 漏洞检测 Burp插件

springspider

Spring Actuator端点的BurpSuite被动扫描插件。

sqlinjectionwiki

一个专注于聚合和记录各种SQL注入方法的wiki

sqliv

massive SQL injection vulnerability scanner

sqlmap

Automatic SQL injection and database takeover tool

sqlmap_api_demo

sqlmap_api_demo

sqlscript

平时用到的注入模板

srcscan

SRCScan(submon) is a SRC assistant tool that periodically scans subdomains and requests WEB services on port 80/443 to check if it is available, and send result to you by e-mail.

sreg

Sreg可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。

ss-panel-v3-mod

Forked from https://github.com/orvice/ss-panel ss-panel修改而来，做了众多优化，支持 VPN 自动开户还有统计流量什么的。

sscan

SSH密码扫描

sscan-1

一款src捡洞扫描器

sslcloud

ssocks

sSocks fork for windows support; original: https://sourceforge.net/projects/ssocks/

steelcon-python-injection

Python Process Injection PoC Code from my SteelCon talk in 2014

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具