Pinned Repositories
Awesome-Asset-Discovery
List of Awesome Asset Discovery Resources
Blasting_dictionary
爆破字典
bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
dictionaries
Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
Hosts_scan
这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Recon
Easy Fast recon script
SaiDict
弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
subjsfinder
Send output from subjs to LinkFinder
C1h2e1's Repositories
C1h2e1/Recon
Easy Fast recon script
C1h2e1/Blasting_dictionary
爆破字典
C1h2e1/dictionaries
Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks
C1h2e1/subjsfinder
Send output from subjs to LinkFinder
C1h2e1/SaiDict
弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
C1h2e1/Awesome-Asset-Discovery
List of Awesome Asset Discovery Resources
C1h2e1/Hosts_scan
这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。
C1h2e1/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
C1h2e1/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
C1h2e1/BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
C1h2e1/httprobe
Take a list of domains and probe for working HTTP and HTTPS servers
C1h2e1/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
C1h2e1/altdns
Generates permutations, alterations and mutations of subdomains and then resolves them
C1h2e1/BugBountyTips
BugBountyTips collect
C1h2e1/c1h2e1.github.io
C1h2e1/can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
C1h2e1/docs.hackerone.com
HackerOne Platform Documentation
C1h2e1/fuzzdb
一个fuzzdb扩展库
C1h2e1/Ghazi
Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace Every GET or POST Parameters With Selected TAB in "Proxy" or "Repeater" TAB
C1h2e1/ico-spider
C1h2e1/ImageTragick-CVE-2016-3714-RShell
C1h2e1/IPRotate_Burp_Extension
Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
C1h2e1/jackson-rce-via-spel
An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
C1h2e1/jsonp
jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints. This could help reveal cross-site script inclusion vulnerabilities or aid in bypassing content security policies.
C1h2e1/meg
Fetch many paths for many hosts - without killing the hosts
C1h2e1/upload-fuzz-dic-builder
上传漏洞fuzz字典生成脚本
C1h2e1/webshell
This is a webshell open source project
C1h2e1/Log4j2-RCE-Scanner
BurpSuite Extension: Log4j RCE Scanner
C1h2e1/woodpecker-framwork-release
高危漏洞精准检测与深度利用框架