R4be1

R4be1's Stars

• Ggasdfg321/FreeFRP

  通过fofa、hunter、shadon导出frp服务器地址，找出未设置密码的frp服务器（白嫖）

  Language:Go416

• jhao104/proxy_pool

  Python ProxyPool for web spider

  Language:Python21.5k5.2k

• ExpLangcn/NucleiTP

  自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

  2.6k342

• chacka0101/exploits

  Exploits project Hacking Command Center

  Language:Shell4722

• fatedier/frp

  A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

  Language:Go85.9k13.3k

• coleak2021/evilhiding

  shellcode loader,bypassav,免杀，一款基于python的shellcode免杀加载器

  Language:Python12312

• inbug-team/SweetBabyScan

  Red Tools 渗透测试

  Language:Go56778

• inbug-team/InScan

  边界打点后的自动化渗透工具

  Language:Go1.8k359

• al0ne/LinuxCheck

  Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

  Language:Shell1.8k392

• bitsadmin/wesng

  Windows Exploit Suggester - Next Generation

  Language:Python4.2k568

• BeichenDream/Godzilla

  哥斯拉

  3.9k531

• ScRiPt1337/Teardroid-phprat

  :india: :robot: It's easy to use android botnet work without port forwarding, vps and android studio

  Language:Smali820313

• ba0gu0/520apkhook

  将安卓远控Apk附加进普通的App中，运行新生成的App时，普通App正常运行，远控正常上线。Attach the Android remote control APK to a regular app. When the newly generated app is launched, the regular app operates as normal while the remote control goes online seamlessly.

  Language:Java981236

• chixiaome/520apkhook

  对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

  8359

• DanMcInerney/pymetasploit3

  Automation library for Metasploit

  Language:PowerShell37292

• gushmazuko/metasploit_in_termux

  Install Metasploit Framework 6 in Termux

  Language:Shell1.6k262

• SecurityAnalysts01/ShellcodeLoader

  Windows通用免杀shellcode生成器，能够绕过Microsoft Defender、360、火绒、Panda等杀软的查杀。

  Language:C++30229

• ttstormxx/jjjjjjjjjjjjjs

  爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应

  Language:Python56544

• oldkingcone/slopShell

  the only php webshell you need.

  Language:PHP22139

• s0md3v/Arjun

  HTTP parameter discovery suite.

  Language:Python5.2k792

• knownsec/404StarLink

  404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

  8.5k821

• TheKingOfDuck/fuzzDicts

  Web Pentesting Fuzz 字典,一个就够了。

  Language:Python7.5k2.4k

• kohlersbtuh15/accesskey_tools

  阿里云aliyun/腾讯云tencentcloud/华为云huaweicloud/aws等各种云厂商的accesskey运维安全工具，accesskey利用工具，包括但不限于创建ecs、ecs查询和命令执行、oss查询和批量下载等各种功能,aws accesskey rce;remote command execute

  Language:Python48642

• plasma-umass/scalene

  Scalene: a high-performance, high-precision CPU, GPU, and memory profiler for Python with AI-powered optimization proposals

  Language:Python12.1k398

• kennethreitz/records

  SQL for Humans™

  Language:Python7.2k572

• projectdiscovery/nuclei-templates

  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  Language:JavaScript9.2k2.6k

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go20.5k2.5k

• lc/DOD-Recon

  Recon for Department of Defense HackerOne program

  Language:HTML4514

• zricethezav/h1domains

  HackerOne "in scope" domains

  Language:Python399117

• aplyc1a/blogs

  PentestNotes

  612115