I-was-a-fish

cobra

Cobra（眼镜蛇） - Static code security scanner & analyser (白盒代码安全扫描与分析系统)

CVE-2021-26855

CVE-2021-26855 exp

Dirty-COW-CVE-2016-5195-Testing

Dirty COW (CVE-2016-5195) Testing

Empire

Empire is a PowerShell and Python post-exploitation agent.

exploit-database

The official Exploit Database repository

get_AV

Windows杀软在线对比辅助

goscraper

Golang pkg to quickly return a preview of a webpage (title/description/images)

gryffin

Gryffin is a large scale web security scanning platform

HackRequests

It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.

HellRaiser

Vulnerability Scanner

I-was-a-fish/CVE-2021-26855

CVE-2021-26855 exp

I-was-a-fish/Dirty-COW-CVE-2016-5195-Testing

Dirty COW (CVE-2016-5195) Testing

I-was-a-fish/Empire

Empire is a PowerShell and Python post-exploitation agent.

I-was-a-fish/exploit-database

The official Exploit Database repository

I-was-a-fish/get_AV

Windows杀软在线对比辅助

I-was-a-fish/goscraper

Golang pkg to quickly return a preview of a webpage (title/description/images)

I-was-a-fish/HackRequests

It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.

I-was-a-fish/icmpsh

Simple reverse ICMP shell

I-was-a-fish/IoTSeeker

Created by Jin Qian via the GitHub Connector

I-was-a-fish/JocationRelease

IOS免越狱虚拟定位修改

I-was-a-fish/LFISuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

I-was-a-fish/meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

I-was-a-fish/Micro8

Gitbook

I-was-a-fish/morphHTA

morphHTA - Morphing Cobalt Strike's evil.HTA

I-was-a-fish/NagaScan

NagaScan is a distributed passive scanner for Web application.

I-was-a-fish/openwrt-ss-kcp-tor

run ss&kcp&tor on openwrt, provide a transparent proxy for pc/phone

I-was-a-fish/pentestkoala

Modified dropbear server which acts as a client and allows authless login

I-was-a-fish/phishlulz

I-was-a-fish/phuip-fpizdam

I-was-a-fish/post-exploitation

Post Exploitation Collection

I-was-a-fish/PyJFuzz

PyJFuzz - Python JSON Fuzzer

I-was-a-fish/Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

I-was-a-fish/restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

I-was-a-fish/shell-scripts

Linux Shell Scripts

I-was-a-fish/Sublist3r

Fast subdomains enumeration tool for penetration testers

I-was-a-fish/supplier

主流供应商的一些攻击性漏洞汇总

I-was-a-fish/Venom

Venom - A Multi-hop Proxy for Penetration Testers Written in Go

I-was-a-fish/WMIcmd

A command shell wrapper using only WMI for Microsoft Windows

I-was-a-fish/xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

I-was-a-fish/xxday

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新