HippoCurl's Stars
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
Qv2ray/Qv2ray
:star: Linux / Windows / macOS 跨平台 V2Ray 客户端 | 支持 VMess / VLESS / SSR / Trojan / Trojan-Go / NaiveProxy / HTTP / HTTPS / SOCKS5 | 使用 C++ / Qt 开发 | 可拓展插件式设计 :star:
ffuf/ffuf
Fast web fuzzer written in Go
trustedsec/social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
rofl0r/proxychains-ng
proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
knownsec/404StarLink
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
epi052/feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
LyleMi/Learn-Web-Hacking
Study Notes For Web Hacking / Web安全学习笔记
lc/gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
payloadbox/command-injection-payload-list
🎯 Command Injection Payload List
christophetd/CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
FeeiCN/GSIL
GitHub Sensitive Information Leakage(GitHub敏感信息泄露监控)
API-Security/APIKit
APIKit:Discovery, Scan and Audit APIs Toolkit All In One.
huolizhuminh/NetWorkPacketCapture
It is used to capture network packet via Android VPN.
pmiaowu/BurpShiroPassiveScan
一款基于BurpSuite的被动式shiro检测插件
VKSRC/Github-Monitor
Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
sting8k/BurpSuite_403Bypasser
Burpsuite Extension to bypass 403 restricted directory
a3vilc0de/PentesterSpecialDict
渗透测试工作中经常使用的字典集合
TheKingOfDuck/burpFakeIP
服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件
w-digital-scanner/w9scan
Plug-in type web vulnerability scanner
c0ny1/sqlmap4burp-plus-plus
sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
0range-x/Domain-penetration_one-stop
域渗透一条龙
Taonn/EmailAll
EmailAll is a powerful Email Collect tool — 一款强大的邮箱收集工具
lxflxfcl/monitor
漏洞监控平台——Monitor。目前实现了监控GitHub、微软、CNNVD三者的漏洞信息,并使用企业微信实时推送。还可以使用邮箱推送,默认关闭。
p0dalirius/ipsourcebypass
This Python script can be used to bypass IP source restrictions using HTTP headers.
Mr-xn/subdomain_shell
一键调用subfinder+ksubdomain+httpx 强强联合 从域名发现-->域名验证-->获取域名标题、状态码以及响应大小 最后保存结果,简化重复操作命令
c0ny1/HTTPHeadModifer
一款快速修改HTTP数据包头的Burp Suite插件
bit4woo/u2c
Unicode To Chinese -- U2C : A burpsuite Extender That Convert Unicode To Chinese 【Unicode编码转中文的burp插件】
th3hack3rwiz/Fu-JS
This tool aims at accumulating javascript files from a given set of subdomains to discover hidden endpoints. It swims through JS files to find more JS files. It also creates a target-specific wordlist from the JS-files for further content discovery and dumps all the discovered JS files neatly in a folder for static analysis.
0cat-r/jslink_XRAY
从js文件中提取url等并与Xray联动