SRW-OG

SRW-OG's Stars

• docmost/docmost

  Docmost is an open-source collaborative wiki and documentation software. It is an open-source alternative to Confluence and Notion.

  Language:TypeScript8.7k40398408

• jokob-sk/NetAlertX

  Network intruder and presence detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.

  Language:JavaScript3.6k22581211

• login-securite/lsassy

  Extract credentials from lsass remotely

  Language:Python2.1k4638250

• wyzxxz/jndi_tool

  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具

  2k2619320

• lasting-yang/frida_dump

  frida dump dex, frida dump so

  Language:JavaScript1.6k2916472

• spyboy-productions/CloakQuest3r

  Uncover the true IP address of websites safeguarded by Cloudflare & Others

  Language:Python1.5k1710206

• projectdiscovery/cloudlist

  Cloudlist is a tool for listing Assets from multiple Cloud Providers.

  Language:Go9023549107

• seekbytes/IPA

  GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat analysis.

  Language:Rust82310025

• VirusTotal/yara-x

  A rewrite of YARA in Rust.

  Language:Rust7101911258

• LaurieWired/JADXecute

  JADX-gui scripting plugin for dynamic decompiler manipulation

  Language:Java62716653

• evild3ad/MemProcFS-Analyzer

  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

  Language:PowerShell584263662

• projectdiscovery/nuclei-ai-extension

  Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

  Language:JavaScript47711638

• howmp/reality

  grs内网穿透工具通过reality协议隐藏特征

  Language:Go4433934

• Offensive-Panda/ProcessInjectionTechniques

  This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at the forefront of the field. It serves as a central repository of knowledge, offering in-depth exploration of various process injection techniques and methods used by adversaries.

  Language:C++3565261

• safedv/RustiveDump

  LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.

  Language:Rust3161241

• AabyssZG/FindEverything

  内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具

  Language:Python3061028

• AccentuSoft/LinkScope_Client

  Repository for the LinkScope Client software.

  Language:Python30683423

• 0xrajneesh/Ethical-Hacking-Projects-for-beginners

  Hands-on ethical hacking projects for beginners, covering network scanning, web app testing, password cracking, honeypots, Wi-Fi auditing, phishing, and SQL injection.

  2218167

• lizhianyuguangming/TomcatScanPro

  tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

  Language:Python1872517

• K-7H7l/Jeecg_Tools

  本工具为jeecg框架漏洞利用工具非jeecg-boot！

  Language:Java1722113

• stivenhacker/EchoStrike

  Deploy reverse shells and perform stealthy process injection with EchoStrike – a Go-based tool for ethical hacking and Red Team operations.

  Language:Go1712026

• kulkansecurity/gitxray

  A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

  Language:Python122152

• sspsec/Spear

  基于GO的渗透工具箱框架

  Language:Go1082211

• BountySecurity/gbounty

  GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identify potential vulnerabilities in web applications.

  Language:Go9601013

• securitycipher/daily-bugbounty-writeups

  This repository contains Bug Bounty writeups

  38504

• al0ne/cloud-audit

  cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。

  Language:Python37104

• dinosn/top_400_passwords

  Top 400 passwords as per HaveIBeenPwned

  21105

• topmrmt/decryption-encryption

  这是一款加解密工具适用于勒索病毒应急演练的展示

  192

• y0k4i-1337/frida4burp

  A set of scripts to facilitate HTTP interception on mobile apps

  Language:JavaScript8100

• ComplexSecurity/Burp-Suite-Exam

  31