cheranlinan

cheranlinan's Stars

• bytedance/sonic

  A blazingly fast JSON serializing & deserializing library

  Language:Assembly6.7k333

• ExpLangcn/NucleiTP

  自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

  2.5k338

• outlaws-bai/Galaxy

  Burp插件，通过自定义hook脚本自动解密报文，让你像测试明文一样简单。A Burp plugin that automatically decrypts messages by custom hook scirpt, making it as simple as testing plaintext.

  Language:Java46734

• jar-analyzer/jar-analyzer

  Jar Analyzer - 一个JAR包分析工具，SCA漏洞分析，批量分析JAR包，方法调用关系搜索，字符串搜索，Spring组件分析，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码

  Language:Java93088

• tanjiti/sec_profile

  爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

  Language:HTML1.1k207

• mrknow001/API-Explorer

  API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)

  Language:Python45433

• JnuSimba/MiscSecNotes

  some learning notes about Web Application Security、 Penetration Test

  818293

• WerWolv/ImHex

  🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

  Language:C++42.7k1.9k

• rtcatc/Packer-Fuzzer

  Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

  Language:Python2.8k284

• 0x727/BypassPro

  对权限绕过自动化bypass的burpsuite插件

  Language:Java80746

• Autumn-27/ScopeSentry

  ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

  Language:Python656100

• Serendipity-Lucky/CVE-2023-33246

  Apache RocketMQ 远程代码执行漏洞利用工具

  113

• shuanx/BurpFingerPrint

  BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件

  Language:Java48327

• shuanx/BurpAPIFinder

  攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。

  Language:Java78946

• errors11/TomcatVuln

  Tomcat漏洞利用工具

  Language:Java17312

• co01cat/SqlmapXPlus

  sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！

  Language:Python57656

• F6JO/JsRouteScan

  Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件

  Language:Java19910

• vaycore/OneScan

  OneScan是递归目录扫描的BurpSuite插件

  Language:Java66129

• JaveleyQAQ/WeChatOpenDevTools-Python

  WeChatOpenDevTool 微信小程序强制开启开发者工具

  Language:Python1.8k513

• antchfx/htmlquery

  htmlquery is golang XPath package for HTML query.

  Language:Go72372

• haidragon/study_frida

  frida视频教程

  7914

• aadog/fd-back

  frida runtime (no python required, only a single file),One-click support for ios dump

  Language:Go23652

• safe6Sec/Fastjson

  Fastjson姿势技巧集合

  1.6k336

• seerge/g-helper

  Lightweight Armoury Crate alternative for Asus laptops and ROG Ally. Control tool for ROG Zephyrus G14, G15, G16, M16, Flow X13, Flow X16, TUF, Strix, Scar and other models

  Language:C#6.8k247

• TheKingOfDuck/fuzzDicts

  Web Pentesting Fuzz 字典,一个就够了。

  Language:Python7.4k2.4k

• DVKunion/SeaMoon

  月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具

  Language:TypeScript523103

• FindAllTeam/FindAll

  Automated analysis of network security emergency response tools.（自动化分析网络安全应急响应工具）

  59739

• tiny-craft/tiny-rdm

  Tiny RDM (Tiny Redis Desktop Manager) - A modern, colorful, super lightweight Redis GUI client for Mac, Windows, and Linux.

  Language:Vue8.3k405

• josStorer/RWKV-Runner

  A RWKV management and startup tool, full automation, only 8MB. And provides an interface compatible with the OpenAI API. RWKV is a large language model that is fully open source and available for commercial use.

  Language:TypeScript5k477

• ifacker/cscan-go

  cscan-go 版本，主要用于C段扫描，信息收集、红队横向渗透等...（相信我，点进来不会后悔的！）

  Language:Go789