cheranlinan's Stars
bytedance/sonic
A blazingly fast JSON serializing & deserializing library
ExpLangcn/NucleiTP
自动整合全网Nuclei的漏洞POC,实时同步更新最新POC!
outlaws-bai/Galaxy
Burp插件,通过自定义hook脚本自动解密报文,让你像测试明文一样简单。A Burp plugin that automatically decrypts messages by custom hook scirpt, making it as simple as testing plaintext.
jar-analyzer/jar-analyzer
Jar Analyzer - 一个JAR包分析工具,SCA漏洞分析,批量分析JAR包,方法调用关系搜索,字符串搜索,Spring组件分析,CFG程序分析,JVM栈帧分析,进阶表达式搜索,字节码指令级的动态调试分析,反编译JAR包一键导出,一键提取序列化数据恶意代码,一键分析BCEL字节码
tanjiti/sec_profile
爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
mrknow001/API-Explorer
API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)
JnuSimba/MiscSecNotes
some learning notes about Web Application Security、 Penetration Test
WerWolv/ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
rtcatc/Packer-Fuzzer
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
0x727/BypassPro
对权限绕过自动化bypass的burpsuite插件
Autumn-27/ScopeSentry
ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点
Serendipity-Lucky/CVE-2023-33246
Apache RocketMQ 远程代码执行漏洞利用工具
shuanx/BurpFingerPrint
BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件
shuanx/BurpAPIFinder
攻防演练过程中,我们通常会用浏览器访问一些资产,但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等,该插件能让我们发现未授权/敏感信息/越权/登陆接口等。
errors11/TomcatVuln
Tomcat漏洞利用工具
co01cat/SqlmapXPlus
sqlmap Xplus 基于 sqlmap,对经典的数据库注入漏洞利用工具进行二开!
F6JO/JsRouteScan
Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件
vaycore/OneScan
OneScan是递归目录扫描的BurpSuite插件
JaveleyQAQ/WeChatOpenDevTools-Python
WeChatOpenDevTool 微信小程序强制开启开发者工具
antchfx/htmlquery
htmlquery is golang XPath package for HTML query.
haidragon/study_frida
frida视频教程
aadog/fd-back
frida runtime (no python required, only a single file),One-click support for ios dump
safe6Sec/Fastjson
Fastjson姿势技巧集合
seerge/g-helper
Lightweight Armoury Crate alternative for Asus laptops and ROG Ally. Control tool for ROG Zephyrus G14, G15, G16, M16, Flow X13, Flow X16, TUF, Strix, Scar and other models
TheKingOfDuck/fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
DVKunion/SeaMoon
月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具
FindAllTeam/FindAll
Automated analysis of network security emergency response tools.(自动化分析网络安全应急响应工具)
tiny-craft/tiny-rdm
Tiny RDM (Tiny Redis Desktop Manager) - A modern, colorful, super lightweight Redis GUI client for Mac, Windows, and Linux.
josStorer/RWKV-Runner
A RWKV management and startup tool, full automation, only 8MB. And provides an interface compatible with the OpenAI API. RWKV is a large language model that is fully open source and available for commercial use.
ifacker/cscan-go
cscan-go 版本,主要用于C段扫描,信息收集、红队横向渗透等...(相信我,点进来不会后悔的!)