Yellowfisherman

Pinned Repositories

-
Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1
Language:HTML10
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
Language:C00
ai-shell
A CLI that converts natural language to shell commands.
Language:TypeScript00
awesome-osint
:scream: A curated list of amazingly awesome OSINT
00
Awesome-POC
一个各类漏洞POC知识库
00
Blasting_dictionary
爆破字典
Language:Python00
NessusToReport
nessus扫描报告自动化生成工具
Language:Python10
password_brute_dictionary
口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型
Language:Python10
pspy
Monitor linux processes without root permissions
Language:Go10
v2rayNG
A V2Ray client for Android, support Xray core and v2fly core
Language:Kotlin10

Yellowfisherman's Repositories

Yellowfisherman/-
Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1
Language:HTML10
Yellowfisherman/pspy
Monitor linux processes without root permissions
Language:Go10
Yellowfisherman/0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
Language:C00
Yellowfisherman/ai-shell
A CLI that converts natural language to shell commands.
Language:TypeScript00
Yellowfisherman/awesome-osint
:scream: A curated list of amazingly awesome OSINT
00
Yellowfisherman/Awesome-POC
一个各类漏洞POC知识库
00
Yellowfisherman/bug-bounty
bug-bounty
Yellowfisherman/captcha-killer-modified
captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite
Yellowfisherman/command-injection-payload-list
🎯 Command Injection Payload List
Yellowfisherman/ddddocr
带带弟弟通用验证码识别OCR pypi版
Yellowfisherman/fish-hub
社工钓鱼
Yellowfisherman/gophish
Open-Source Phishing Toolkit
Yellowfisherman/jwt-cracker
Simple HS256 JWT token brute force cracker
Yellowfisherman/jwt_tool
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
Yellowfisherman/linux-exploit-suggester
Linux privilege escalation auditing tool
Yellowfisherman/Online_tools
该工具是一个集成了非常多渗透测试工具，类似软件商城的工具可以进行工具下载，工具的更新，工具编写了自动化的安装脚本，不用担心工具跑不起来。
Yellowfisherman/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Yellowfisherman/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Yellowfisherman/Pentest_Dic
自己收集整理自用的字典
Yellowfisherman/PhishingBook
红蓝对抗：钓鱼演练资源汇总&备忘录
Yellowfisherman/PicBypass
图片马免杀
Yellowfisherman/Poc-Monitor
🔍 Github CVE POC 信息监控推送 🚀
Yellowfisherman/proxy_pool
Python爬虫代理IP池(proxy pool)
Yellowfisherman/RsaCtfTool
RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data
Yellowfisherman/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Yellowfisherman/ShuiZe_0x727
信息收集自动化工具
Yellowfisherman/ss_ssr_shadowsocket_clash_clashr_v2ray__trojan_ipcl
自由上网，科学上网机场推荐，ss, ssr, v2ray, trojan, clash, clashr，客户端末尾自取
Yellowfisherman/Sublist3r
Fast subdomains enumeration tool for penetration testers
Yellowfisherman/xss-payload-list
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
Yellowfisherman/you-get
:arrow_double_down: Dumb downloader that scrapes the web