Mumuuu

Mumuuu's Stars

• for-A1kaid/CodeAudit

  记录一些代码审计过的源码

  9412

• Taonn/EmailAll

  EmailAll is a powerful Email Collect tool — 一款强大的邮箱收集工具

  Language:Python668116

• Threezh1/JSFinder

  JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

  Language:Python2.6k399

• pingc0y/URLFinder

  一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

  Language:Go2.5k187

• shmilylty/netspy

  netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

  Language:Go1.9k204

• MobSF/Mobile-Security-Framework-MobSF

  Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

  Language:JavaScript17k3.2k

• API-Security/APIKit

  APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

  Language:Java1.8k165

• d5shenwu/VulPOC

  VulPOC 用于记录本人复现过的漏洞

  Language:Python10626

• guchangan1/All-Defense-Tool

  本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。

  5.2k1.1k

• f/awesome-chatgpt-prompts

  This repo includes ChatGPT prompt curation to use ChatGPT better.

  Language:HTML108k14.9k

• zema1/suo5

  一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

  Language:Java2k188

• Tsojan/TsojanScan

  An integrated BurpSuite vulnerability detection plug-in.

  1k55

• Bywalks/DarkAngel

  DarkAngel 是一款全自动白帽漏洞扫描器，从hackerone、bugcrowd资产监听到漏洞报告生成、漏洞URL截屏、消息通知。

  Language:Ruby58674

• safe6Sec/PentestDB

  各种数据库的利用姿势

  982190

• knownsec/404StarLink

  404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

  8.2k796

• wgpsec/ENScan_GO

  一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

  Language:Go2.9k283

• frida/frida

  Clone this repo to build Frida

  Language:Meson15.6k1.6k

• arkadiyt/bounty-targets-data

  This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

  3.1k573

• Mustard404/Savior

  渗透测试报告自动生成工具！

  Language:JavaScript463104

• StarCrossPortal/scalpel

  scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。

  72980

• teamssix/twiki

  T Wiki 云安全知识文库，可能是国内首个云安全知识文库？

  Language:Dockerfile890116

• ba0gu0/520apkhook

  将安卓远控Apk附加进普通的App中，运行新生成的App时，普通App正常运行，远控正常上线。Attach the Android remote control APK to a regular app. When the newly generated app is launched, the regular app operates as normal while the remote control goes online seamlessly.

  Language:Java962231

• knownsec/KCon

  KCon is a famous Hacker Con powered by Knownsec Team.

  Language:JavaScript4.4k1.4k

• nsacyber/GRASSMARLIN

  Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber

  Language:Java925290

• hi-KK/ICS-Protocol-identify

  Using nmap NSE scripts for identifying common ICS protocols[使用nmap的nse脚本对常见工控协议进行识别，附对应nse脚本，并记录pcap流量]

  Language:Lua14349

• digitalbond/Redpoint

  Digital Bond's ICS Enumeration Tools

  Language:Lua429146

• LoRexxar/Kunlun-M

  KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

  Language:Python2.2k308

• nieweiming/pc_wxapkg_decrypt_python

  PC微信小程序 wxapkg 解密

  199

• 9bie/oss-stinger

  利用oss实现http转发/cobalt strike上线

  Language:Go33728

• jar-analyzer/jar-analyzer-v1-gui

  建议使用新版：https://github.com/jar-analyzer/jar-analyzer

  Language:Java896113