HB666666

HB666666's Stars

• lz520520/railgun

  2k246

• hanc00l/nemo_go

  Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。

  Language:JavaScript1.7k247

• 78778443/QingScan

  一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

  Language:PHP1.7k288

• lcvvvv/kscan

  Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

  Language:Go3.9k516

• shack2/SuperSQLInjectionV1

  超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库；支持手动灵活的进行SQL注入绕过，可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计，需要使用人员对SQL注入有一定了解。

  Language:C#1.2k278

• Tuhinshubhra/CMSeeK

  CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

  Language:Python2.3k497

• TheKingOfDuck/fuzzDicts

  Web Pentesting Fuzz 字典,一个就够了。

  Language:Python7.5k2.4k

• H4ckForJob/dirmap

  An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

  Language:Python3.1k546

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go12.4k1.3k

• zan8in/afrog

  A Security Tool for Bug Bounty, Pentest and Red Teaming.

  Language:Go3.4k383

• hisxo/gitGraber

  gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

  Language:Python2k330

• m3n0sd0n4ld/GooFuzz

  GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

  Language:Shell1.3k137

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go11.9k1.9k

• projectdiscovery/subfinder

  Fast passive subdomain enumeration tool.

  Language:Go10.1k1.3k

• projectdiscovery/cvemap

  Navigate the CVE jungle with ease.

  Language:Go1.7k110

• projectdiscovery/dnsx

  dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

  Language:Go2.2k238

• dark-kingA/superSearchPlus

  superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。

  Language:HTML1.3k79

• Tas9er/ByPassBehinder4J

  冰蝎Java WebShell自动化免杀生成

  76598

• rebeyond/Behinder

  “冰蝎”动态二进制加密网站管理客户端

  5.8k964

• BeichenDream/Godzilla

  哥斯拉

  3.9k531

• carr0t2/nps-auth-bypass

  nps认证绕过利用工具，CVE-2022-40494，使用此工具可在浏览器访问web控制端后台页面，或者批量获取socks5和http代理

  Language:Python29539

• L-codes/Neo-reGeorg

  Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

  Language:Python2.9k440

• idlefire/ew

  内网穿透(跨平台)

  993358

• cuixueshe/earthworm

  Learning English through the method of constructing sentences with conjunctions

  Language:TypeScript5.9k664

• Goqi/Erfrp

  Erfrp-frp二开-免杀与隐藏

  Language:Go60191

• ehang-io/nps

  一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

  Language:Go30.5k5.5k

• r00t-3xp10it/venom

  venom - C2 shellcode generator/compiler/handler

  Language:Shell1.8k596

• Veil-Framework/Veil

  Veil 3.1.X (Check version info in Veil at runtime)

  Language:Python4k882

• notepad-plus-plus/notepad-plus-plus

  Notepad++ official repository

  Language:C++22.8k4.6k

• rizonesoft/Notepad3

  Notepad like text editor based on the Scintilla source code. Notepad3 based on code from Notepad2 and MiniPath on code from metapath. Download Notepad3:

  Language:C++5k334