chaserw's Stars
Hel10-Web/Databasetools
一款用Go语言编写的数据库自动化提权工具,支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接
XinRoom/go-portScan
High-performance port scanner. 高性能端口扫描器. syn scanner
Threekiii/Awesome-Redteam
一个攻防知识仓库 Red Teaming and Offensive Security
microsoft/vscode
Visual Studio Code
antoinet/burp-decompressor
An extension for BurpSuite used to access and modify compressed HTTP payloads without changing the content-encoding.
AlphabugX/Alphalog
DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。
safe6Sec/Fastjson
Fastjson姿势技巧集合
A-D-Team/attackRmi
rebeyond/Behinder
“冰蝎”动态二进制加密网站管理客户端
LandGrey/SpringBootVulExploit
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
welk1n/JNDI-Injection-Exploit
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
hluwa/frida-dexdump
A frida tool to dump dex in memory to support security engineers analyzing malware.
xiaoy-sec/Pentest_Note
渗透测试常规操作记录
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
maurosoria/dirsearch
Web path scanner
stevenjoezhang/live2d-widget
把萌萌哒的看板娘抱回家 (ノ≧∇≦)ノ | Live2D widget for web platform
zhzyker/exphub
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
feihong-cs/ShiroExploit-Deprecated
Shiro550/Shiro721 一键化利用工具,支持多种回显方式
fofapro/vulfocus
🚀Vulfocus 是一个漏洞集成平台,将漏洞环境 docker 镜像,放入即可使用,开箱即用。
Mr-xn/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
chaitin/xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
psf/requests
A simple, yet elegant, HTTP library.
knownsec/pocsuite3
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
Hack-with-Github/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
SecWiki/sec-chart
安全思维导图集合
Micropoor/Micro8
Gitbook
lijiejie/subDomainsBrute
A fast sub domain brute tool for pentesters
Lucifer1993/struts-scan
Python2编写的struts2漏洞全版本检测和利用工具