d4wner

d4wner's Stars

• doocs/source-code-hunter

  😱 从源码层面，剖析挖掘互联网行业主流技术的底层实现原理，为广大开发者 “提升技术深度” 提供便利。目前开放 Spring 全家桶，Mybatis、Netty、Dubbo 框架，及 Redis、Tomcat 中间件等

  Language:Java22.5k453334.2k

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go13.6k1625281.4k

• epi052/feroxbuster

  A fast, simple, recursive content discovery tool written in Rust.

  Language:Rust6.3k54295523

• rootphantomer/Blasting_dictionary

  爆破字典

  Language:Python5k12442.9k

• FunnyWolf/Viper

  A Unified Platform for Adversary Emulation and Red Team Operations

  3.9k54227538

• neargle/my-re0-k8s-security

  :atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

  Language:Shell3k453464

• jxhczhl/JsRpc

  远程调用(rpc)浏览器方法，免去抠代码补环境

  Language:Go1.6k2140353

• qi4L/JYso

  JNDIExploit or a ysoserial.

  Language:Java1.6k5858182

• pascal-lab/Tai-e

  An easy-to-learn/use static analysis framework for Java

  Language:Java1.5k30132178

• 0xHJK/dumpall

  一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

  Language:Python1.4k1722148

• HXSecurity/DongTai

  Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

  Language:Python1.3k12345149

• eeeeeeeeee-code/e0e1-wx

  微信小程序辅助渗透-自动化

  Language:Python1.2k1329179

• dagrz/aws_pwn

  A collection of AWS penetration testing junk

  Language:Python1.2k503196

• cnrstar/anti-honeypot

  一款可以检测WEB蜜罐并阻断请求的Chrome插件

  Language:JavaScript84015570

• whwlsfb/Log4j2Scan

  Log4j2 RCE Passive Scanner plugin for BurpSuite

  Language:Java794135995

• G3et/Search_Viewer

  集Fofa、Hunter鹰图、Shodan、360 quake、Zoomeye 钟馗之眼、censys 为一体的空间测绘gui图形界面化工具，支持一键采集爬取和导出fofa、shodan等数据，方便快捷查看

  Language:Python711113971

• DeEpinGh0st/MDUT-Extend-Release

  MDUT-Extend(扩展版本)

  70981933

• smxiazi/xia_Liao

  xia Liao（瞎料）burp插件 用于Windows在线进程/杀软识别 与 web渗透注册时，快速生成需要的资料用来填写，资料包含：姓名、手机号、身份证、统一社会信用代码、组织机构代码、银行卡，以及各类web语言的hello world输出和生成弱口令字典等。

  Language:Java6386643

• bit4woo/burp-api-drops

  burp插件开发指南

  Language:Java6113397

• Kento-Sec/AsamF

  AsamF是集成Fofa、Quake、Hunter、Shodan、Zoomeye、Chinaz、0.zone及爱企查的一站式企业信息资产收集、网络资产测绘工具。

  537112636

• ggg4566/BurpBountyPlus

  BurpBounty 魔改版本

  Language:Java4108856

• tangxiaofeng7/Fofa-collect

  Fofa平台采集工具

  Language:Java32821044

• iiiusky/AntiHoneypot-Chrome-simple

  Chrome 蜜罐检测插件

  Language:JavaScript2977224

• RedSiege/CIMplant

  C# port of WMImplant which uses either CIM or WMI to query remote systems

  Language:C#19713130

• smaranchand/bucky

  Bucky (An automatic S3 bucket discovery tool)

  Language:PHP1946827

• jayus0821/Armor

  Armor 浏览器反蜜罐插件 honeypot

  Language:JavaScript1782111

• uknowsec/SharpOSS

  Quickly upload files to aliyun OSS by aliyun-oss-csharp-sdk

  Language:C#753117

• TelefonicaTC2Tech/typodetect

  Typodetect

  Language:Python74508

• S9MF/ShiroScan2

  基于BurpShiroPassiveScan修改增加了Xray回显链生成

  Language:Java541110

• d4wner/Exp-collect

  Language:JavaScript1000