forktopot

forktopot's Stars

• yzddmr6/Java-Js-Engine-Payloads

  Java Js Engine Payloads All in one

  25823

• Getshell/Mshell

  Memshell-攻防内存马研究

  Language:Java62685

• ai-shifu/ChatALL

  Concurrently chat with ChatGPT, Bing Chat, Bard, Alpaca, Vicuna, Claude, ChatGLM, MOSS, 讯飞星火, 文心一言 and more, discover the best answers

  Language:JavaScript15.1k1.6k

• awake1t/Awesome-hacking-tools

  收集网上好用、实用的红蓝对抗武器。从资产扫描、泄漏扫描、信息收集、漏洞扫描、SRC批量挖掘、内网渗透、应急响应等等工具。 大部分我都用过、部分会写上自己的感想与建议，希望对你有帮助

  Language:Python42956

• f0ng/autoDecoder

  Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

  Language:Java89068

• g908682550/Java-StudyNotes

  34

• Amulab/CAudit

  集权设施扫描器

  Language:Python40653

• apache/myfaces

  Apache MyFaces Core

  Language:Java11871

• FunnyWolf/Viper

  Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台

  3.7k524

• xqx12/daily-info

  30647

• Y4tacker/JavaSec

  a rep for documenting my study, may be from 0 to 0.1

  Language:Java1.9k283

• chainreactors/gogo

  面向红队的, 高度可控可拓展的自动化引擎

  Language:Go1.4k142

• c0olw/NacosRce

  Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

  Language:Java72285

• zan8in/afrog

  A Security Tool for Bug Bounty, Pentest and Red Teaming.

  Language:Go3.4k383

• Ciyfly/woodpecker

  兼容xray nuclei yaml格式 以及go代码格式的poc验证扫描器

  Language:Go17721

• Threekiii/Awesome-POC

  一个漏洞POC知识库 目前数量 1000+

  3.5k738

• 4ra1n/mysql-fake-server

  MySQL Fake Server (纯Java实现，支持GUI版和命令行版，提供Dockerfile，支持多种常见JDBC利用)

  Language:Java66577

• burrowers/garble

  Obfuscate Go builds

  Language:Go3.9k249

• BishopFox/sliver

  Adversary Emulation Framework

  Language:Go8.3k1.1k

• lemonlove7/dirsearch_bypass403

  目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别

  Language:Python70758

• safe6Sec/Fastjson

  Fastjson姿势技巧集合

  1.6k337

• HackTricks-wiki/hacktricks

  Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

  Language:Python8.9k2.6k

• shadowsock5/ysoserial

  mvn clean package -DskipTests

  Language:Java4510

• Mob2003/rakshasa

  基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

  Language:Go1k142

• projectdiscovery/katana

  A next-generation crawling and spidering framework.

  Language:Go10.9k580

• tongcheng-security-team/NextScan

  飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。

  Language:JavaScript1.1k105

• rambleZzz/nmScan_go

  一款基于GO语言编写的支持调用fofa搜索结果、masscan json格式扫描结果、直接调用ip和ip:port格式4种方式进行nmap快速扫描，多种格式输出的主机端口信息的收集工具

  Language:Go8

• rootclay/WMIHACKER

  A Bypass Anti-virus Software Lateral Movement Command Execution Tool

  Language:VBScript1.4k230

• projectdiscovery/naabu

  A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

  Language:Go4.7k542

• wgpsec/ENScan_GO

  一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

  Language:Go3k287