5-day longest streak
-
fscan ★ PINNED
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Go ★ 14k 4d agoExplain → -
ProxyPool
一款用于自动切换ip的代理池服务,无需任何依赖,能快速运行。
Python ★ 244 5y agoExplain → -
vanscan
No description.
JavaScript ★ 14 5y agoExplain → -
goWMIExec ⑂
Really stupid re-implementation of invoke-wmiexec
Go ★ 12 3y agoExplain → -
C2ReverseProxy ⑂
一款可以在不出网的环境下进行反向代理及cs上线的工具
Go ★ 7 5y agoExplain → -
Pentest-Notes ⑂
《内网安全攻防-渗透测试实战指南》这本书的阅读笔记。
★ 7 6y agoExplain → -
portscan
No description.
Python ★ 6 5y agoExplain → -
xray-crack ⑂
xray社区高级版证书生成,仅供学习研究,正常使用请支持正版
★ 5 5y agoExplain → -
BurpSuitePro-2.1 ⑂
什么? 你想用免费的BurpSuitePro版本!!!
★ 5 5y agoExplain → -
GoScan ⑂
GoScan是采用Golang语言编写的一款分布式综合资产管理系统,适合红队、SRC等使用
Go ★ 5 5y agoExplain → -
grdp ⑂
pure golang rdp protocol
JavaScript ★ 4 1y agoExplain → -
awvs-decode ⑂
AWVS 最简单、最快、最方便、最新的解码/解密方法,仅15行代码!!无须任何依赖任何工具
★ 4 6y agoExplain → -
Vxscan ⑂
python3写的综合扫描工具,主要用来敏感文件探测(目录扫描与js泄露接口),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,弱口令探测,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
Python ★ 4 6y agoExplain → -
fuzzDicts ⑂
Web Pentesting Fuzz 字典,一个就够了。
★ 4 6y agoExplain → -
lev.shadow1ng.fscan
潮汐lev项目镜像
Python ★ 3 4y agoExplain → -
OneForAll ⑂
OneForAll是一款功能强大的子域收集工具
★ 2 6y agoExplain → -
360SafeBrowsergetpass ⑂
这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具,用于节省红队工作量,通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
★ 2 5y agoExplain → -
shadow1ng.github.io
No description.
CSS ★ 2 7mo agoExplain → -
webshell ⑂
This is a webshell open source project
PHP ★ 2 6y agoExplain → -
RevokeMsgPatcher ⑂
:trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁(我已经看到了,撤回也没用了)
★ 2 5y agoExplain → -
wooyun_public ⑂
This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops
★ 2 7y agoExplain → -
HackBar ⑂
Firefox and Google Chrome Extension of HackBar without license
★ 2 6y agoExplain → -
Some-PoC-oR-ExP ⑂
各种漏洞poc、Exp的收集或编写
★ 2 6y agoExplain → -
linbing ⑂
本系统是对目标进行漏洞扫描的一个系统,前端采用vue技术,后端采用flask.核心原理是扫描主机的开放端口情况,然后根据端口情况逐个去进行poc检测,poc有110多个,包含绝大部分的中间件漏洞,本系统的poc皆来源于网络或在此基础上进行修改,在centons7环境下使用nginx和uwsgi部署,部署起来可能有点麻烦,烦请多点耐心
★ 2 6y agoExplain → -
ksubdomain ⑂
Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second
★ 2 4y agoExplain → -
CVE-2020-14882 ⑂
No description.
★ 2 5y agoExplain → -
Antenna ⑂
Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式,将不同漏洞场景检测能力通过插件的形式进行集合,通过与目标进行out-bind的数据通信方式进行辅助检测。
JavaScript ★ 1 3y agoExplain → -
Gscan ⑂
Gscan is a high concurrency scanner based on golang
★ 1 6y agoExplain → -
cmsprint ⑂
CMS和中间件指纹库
★ 1 7y agoExplain → -
easyXssPayload ⑂
XssPayload List . Usage:
★ 1 6y agoExplain → -
springboot_scan
Springboot directory scanning
★ 1 4y agoExplain → -
anti-av ⑂
Resources About Anti-Virus and Anti-Anti-Virus, including 200+ tools and 1300+ posts
★ 1 6y agoExplain → -
SharpSQLTools ⑂
SharpSQLTools 和@Rcoil一起写的小工具,可上传下载文件,xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
★ 1 4y agoExplain → -
crawlergo ⑂
A powerful browser crawler for web vulnerability scanners
Go ★ 1 4y agoExplain → -
Bypass ⑂
过各waf注入上传等
★ 1 8y agoExplain → -
vulhub ⑂
Pre-Built Vulnerable Environments Based on Docker-Compose
★ 1 6y agoExplain → -
gopoc ⑂
用cel-go重现了长亭xray的poc检测功能的轮子
★ 1 5y agoExplain → -
CrossC2 ⑂
generate CobaltStrike's cross-platform payload
★ 1 6y agoExplain → -
Malleable-C2-Profiles ⑂
Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.
★ 1 5y agoExplain → -
Blasting_dictionary ⑂
爆破字典
★ 1 8y agoExplain → -
code-breaking ⑂
Code-Breaking Puzzles
JavaScript ★ 1 7y agoExplain → -
clawgod ⑂
This is NOT a third-party Claude Code client. ClawGod is a runtime patch applied on top of the official Claude Code. It works with any version — as Claude Code updates, the patch continues to take effect
HTML ★ 0 1mo agoExplain → -
CNVD-2020-10487-Tomcat-Ajp-lfi ⑂
Tomcat-Ajp协议文件读取漏洞
★ 0 6y agoExplain → -
OXID-Find ⑂
Find the host network card address through OXID Resolver
★ 0 6y agoExplain → -
WMIHACKER ⑂
A Bypass Anti-virus Software Lateral Movement Command Execution Tool
★ 0 5y agoExplain → -
get_AV ⑂
Windows杀软在线对比辅助
★ 0 6y agoExplain → -
doublepulsar-detection-script ⑂
A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
★ 0 6y agoExplain → -
proxyservie
No description.
Python ★ 0 6y agoExplain → -
crt-decrypt ⑂
Decrypt SecureCRT Password Online
★ 0 6y agoExplain → -
cncs-armory-ktrimisu ⑂
No description.
★ 0 6y agoExplain → -
myScripts ⑂
一个垃圾桶
★ 0 6y agoExplain → -
quasar ⑂
Quasar Framework - Build high-performance VueJS user interfaces in record time
★ 0 6y agoExplain → -
test
No description.
★ 0 6y agoExplain → -
block
block
★ 0 7y agoExplain → -
F-Scrack-1 ⑂
一款python编写的轻量级弱口令检测脚本,目前支持以下服务:FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。
★ 0 8y agoExplain → -
F-Scrack ⑂
No description.
★ 0 9y agoExplain → -
dirtycow ⑂
No description.
C ★ 0 8y agoExplain → -
thc-hydra ⑂
hydra
C ★ 0 6y agoExplain → -
SNETCracker ⑂
超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
C# ★ 0 6y agoExplain → -
QuickLook ⑂
Bring macOS “Quick Look” feature to Windows
C# ★ 0 7y agoExplain → -
awvs_script_decode ⑂
No description.
PHP ★ 0 8y agoExplain → -
hackbar2.1.3 ⑂
No description.
★ 0 7y agoExplain →
No repos match these filters.