cerrymoli's Stars
AFLplusplus/AFLplusplus
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
thewhiteh4t/pwnedOrNot
OSINT Tool for Finding Passwords of Compromised Email Addresses
kahunalu/pwnbin
Python Pastebin Webcrawler that returns list of public pastebins containing keywords
rndinfosecguy/Scavenger
Crawler (Bot) searching for credential leaks on paste sites.
jordanpotti/CloudScraper
CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
phra/rustbuster
A Comprehensive Web Fuzzer and Content Discovery Tool
Hack-with-Github/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
We5ter/Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
r0ysue/r0capture
安卓应用层抓包通杀脚本
apkunpacker/FridaScripts
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
prowler-cloud/prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
ibaiw/2023Hvv
2023 HVV情报速递~
projectdiscovery/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
jaeles-project/gospider
Gospider - Fast web spider written in Go
hakluke/hakrawler
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
ffuf/ffuf
Fast web fuzzer written in Go
caddyserver/caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
KCarretto/paragon
Red Team engagement platform with the goal of unifying offensive tools behind a simple UI
wapiti-scanner/wapiti
Web vulnerability scanner written in Python3
0xKayala/NucleiFuzzer
NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
beruangsalju/shell-backdoor
all shell backdoor in the world
HXSecurity/DongTai
Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.
LoRexxar/Kunlun-M
KunLun-M是一个完全开源的静态白盒扫描工具,支持PHP、JavaScript的语义扫描,基础安全、组件安全扫描,Chrome Ext\Solidity的基础扫描。
baidu/openrasp
🔥Open source RASP solution
Vu1nT0tal/IoT-vulhub
IoT固件漏洞复现环境
4ra1n/shell-analyzer
已集成到 jar-analyzer 中 https://github.com/jar-analyzer/jar-analyzer
lanyi1998/DNSlog-GO
DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具,自带WEB界面 / DNSLog-GO is a monitoring tool written in Golang that monitors DNS resolution records. It comes with a web interface.
orleven/Celestion
Celestion 是一个无回显漏洞测试辅助平台,平台使用flask编写,提供DNSLOG,HTTPLOG等功能。 (界面懒得弄,后续有需要再说)。