Omo1de

Omo1de's Stars

• yeyintminthuhtut/Awesome-Red-Teaming

  List of Awesome Red Teaming Resources

  7k1.7k

• knownsec/shellcodeloader

  shellcodeloader

  Language:C++1.7k371

• lengjibo/RedTeamTools

  记录自己编写、修改的部分工具

  Language:Python1.4k350

• gophish/gophish

  Open-Source Phishing Toolkit

  Language:Go12k2.3k

• A-D-Team/SharpMemshell

  Memshell

  Language:C#26943

• cube0x0/noPac

  CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

  Language:C#1.3k323

• SecuraBV/CVE-2020-1472

  Test tool for CVE-2020-1472

  Language:Python1.7k358

• ph4ntonn/Stowaway

  👻Stowaway -- Multi-hop Proxy Tool for pentesters

  Language:Go2.9k413

• kelvinBen/AppInfoScanner

  一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

  Language:Python3.3k385

• fullhunt/log4j-scan

  A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

  Language:Python3.4k739

• TideSec/TideFinger

  TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。

  Language:Python2k348

• 3gstudent/Pentest-and-Development-Tips

  A collection of pentest and development tips

  1.1k305

• Mochazz/ThinkPHP-Vuln

  关于ThinkPHP框架的历史漏洞分析集合

  1.1k169

• LangziFun/LangSrcCurise

  SRC子域名资产监控

  Language:Python1.3k238

• shmilylty/OneForAll

  OneForAll是一款功能强大的子域收集工具

  Language:Python8.5k1.3k

• chaitin/xray

  一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

  Language:Vue10.6k1.8k

• Ridter/Intranet_Penetration_Tips

  2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

  4.5k1.1k

• rootclay/Powershell-Attack-Guide

  Powershell攻击指南----黑客后渗透之道

  Language:HTML837194

• FeeiCN/GSIL

  GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

  Language:Python2.1k488

• madneal/gshark

  Scan for sensitive information easily and effectively.

  Language:Go922143

• jeffzh3ng/fuxi

  Penetration Testing Platform

  Language:Python1.3k373

• tom0li/collection-document

  Collection of quality safety articles. Awesome articles.

  2k514

• enjoiz/XXEinjector

  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

  Language:Ruby1.6k315

• python-security/pyt

  A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

  Language:Python2.2k244

• xp4xbox/Python-Backdoor

  This project is a cross-platform backdoor/reverse shell and post-exploitation tool written in Python3

  Language:Python718206

• BugScanTeam/hackhttp

  Hackhttp is an HTTP library, written in Python.

  Language:Python421146

• Xyntax/DirBrute

  多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

  Language:Python272129

• Raindal/php_mvc

  A Most Simple PHP MVC Beginners Tutorial

  Language:PHP16487

• yeszao/fastphp

  最简洁易懂的PHP MVC框架入门教程

  Language:PHP316123

• dustyfresh/PHP-vulnerability-audit-cheatsheet

  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.

  34858