AaronCaiii's Stars
knownsec/ksubdomain
无状态子域名爆破工具
shadowsocksrr/shadowsocksr-android
A ShadowsocksR client for Android
pmiaowu/BurpShiroPassiveScan
一款基于BurpSuite的被动式shiro检测插件
anhkgg/SuperDllHijack
SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
pentestmonkey/php-reverse-shell
SecWiki/windows-kernel-exploits
windows-kernel-exploits Windows平台提权漏洞集合
Ascotbe/Kernelhub
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
ds19991999/SecBox
🖤 网络安全与渗透测试工具导航
Ascotbe/Medusa
:cat2:Medusa是一个红队武器库平台,目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能,持续开发中
AntSwordProject/antSword
**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
BeichenDream/Godzilla
哥斯拉
raddyfiy/caidao-official-version
**菜刀官方版本,拒绝黑吃黑,来路清晰
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
moonD4rk/HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
daffainfo/AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
koutto/web-brutator
Fast Modular Web Interfaces Bruteforcer
k8gege/K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
tanjiti/sec_profile
爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
MustangYM/WeChatExtension-ForMac
A plugin for Mac WeChat
knownsec/404StarLink
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
hashcat/hashcat
World's fastest and most advanced password recovery utility
JohnTroony/php-webshells
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
tennc/webshell
This is a webshell open source project
shadowsocks/shadowsocks-android
A shadowsocks client for Android
shadowsocks/ShadowsocksX-NG
Next Generation of ShadowsocksX
shadowsocks/shadowsocks-windows
A C# port of shadowsocks
Leezj9671/Pentest_Interview
个人准备渗透测试和安全面试的经验之谈,和去部分厂商的面试题,干货真的满满~
rebeyond/Behinder
“冰蝎”动态二进制加密网站管理客户端
shimmeris/CTF-Web-Challenges
zhzyker/vulmap
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能