I-was-a-fish

I-was-a-fish's Stars

• SafeBreach-Labs/WindowsDowndate

  A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities

  Language:Python58176

• pingc0y/URLFinder

  一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

  Language:Go2.6k197

• rtcatc/Packer-Fuzzer

  Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

  Language:Python2.9k293

• Pennyw0rth/NetExec

  The Network Execution Tool

  Language:Python3.1k344

• pry0cc/axiom

  The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

  Language:Shell4k635

• zema1/suo5

  一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

  Language:Java2.1k198

• vi3t1/vmprotect-3.5.1

  Language:C++6876

• blacklanternsecurity/dp_cryptomg

  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

  Language:Python439

• nettitude/SharpWSUS

  Language:C#43973

• RedTeamPentesting/pretender

  Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

  Language:Go96667

• kleiton0x00/Proxy-DLL-Loads

  A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

  Language:C32439

• houseofxyz/injectAllTheThings

  Seven different DLL injection techniques in one single project.

  Language:C3

• gentilkiwi/mimikatz

  A little tool to play with Windows security

  Language:C19.4k3.7k

• schellingb/DLLFromMemory-net

  C# library to load a native DLL from memory without the need to allow unsafe code

  Language:C#8824

• matusf/openapi-fuzzer

  Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free!

  Language:Rust54023

• SnaffCon/Snaffler

  a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

  Language:C#2.1k209

• 0xHossam/Killer

  Killer tool is designed to bypass AV/EDR security tools using various evasive techniques.

  Language:C++725112

• jeremylong/DependencyCheck

  OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

  Language:Java6.4k1.3k

• jiji262/wooyun_articles

  drops.wooyun.org 乌云Drops文章备份

  Language:HTML1.1k658

• blacklanternsecurity/bbot

  A recursive internet scanner for hackers.

  Language:Python4.7k422

• blacklanternsecurity/badsecrets

  A library for detecting known secrets across many web frameworks

  Language:Python50544

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61k14.6k

• commixproject/commix

  Automated All-in-One OS Command Injection Exploitation Tool.

  Language:Python4.6k814

• KimJun1010/WeblogicTool

  WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

  1.6k107

• microsoft/win32-app-isolation

  Tools and documentation for Win32 app isolation

  1.3k33

• Accenture/Spartacus

  Spartacus DLL/COM Hijacking Toolkit

  Language:C#990134

• 3andne/restls

  Restls Protocol: A Perfect Impersonation of TLS; Restls协议: 对TLS的完美伪装

  Language:Rust27926

• microsoft/restler-fuzzer

  RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

  Language:Python2.6k298

• microsoft/onefuzz

  A self-hosted Fuzzing-As-A-Service platform

  Language:C#2.8k199

• urbanadventurer/WhatWeb

  Next generation web scanner

  Language:Ruby5.5k905