Pinned Repositories
10
2018-QWB-CTF
2018强网杯CTF___题目整理
2023-longjiancup
2023 陇剑杯 线上初赛附件
Active-Directory
AD related packs are here!
AD-lab
An active directory laboratory for penetration testing.
ad-ldap-enum
An LDAP based Active Directory user and group enumeration tool
adobe-flash-phishing-page
Adobe Flash Phishing Page(Adobe Flash钓鱼页面)
afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
All-Defense-Tool
本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。
AlliN
A flexible scanner
h1ck0r's Repositories
h1ck0r/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
h1ck0r/APIKit
APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
h1ck0r/ARL_backup
ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
h1ck0r/AVEvasionCraftOnline
AV Evasion Craft Online 在线免杀平台
h1ck0r/CoercedPotato
Windows potato to privesc
h1ck0r/CS-AutoPostChain
基于 OPSEC 的 CobaltStrike 后渗透自动化链
h1ck0r/docker-java
Java Docker API Client
h1ck0r/docs-zh-cn
Vue 文档官方中文翻译 ｜ Official Chinese translation for Vue docs
h1ck0r/Fofa-hack
非付费会员，fofa数据采集工具
h1ck0r/fofa_viewer
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
h1ck0r/GOAD
game of active directory
h1ck0r/goclone
Website Cloner - Utilizes powerful Go routines to clone websites to your computer within seconds.
h1ck0r/HackerPermKeeper
权限维持
h1ck0r/JDumpSpider
HeapDump敏感信息提取工具
h1ck0r/jmal-cloud-view
JmalCloud 是一款私有云存储网盘项目，能够简单安全管理您的云端文件
h1ck0r/json-server
Get a full fake REST API with zero coding in less than 30 seconds (seriously)
h1ck0r/legion
Automatic Enumeration Tool based in Open Source tools
h1ck0r/LocalPotato
LocalPotato
h1ck0r/OneScan
OneScan是递归目录扫描的BurpSuite插件
h1ck0r/oss-browser
OSS Browser 提供类似windows资源管理器功能。用户可以很方便的浏览文件，上传下载文件，支持断点续传等。
h1ck0r/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
h1ck0r/php-unserialize-lib
php-unserialize-lib 是一个根据 php 反序列化工具 PHPGGC 对应编写而来的反序列化靶场，提供 PHPGGC 中大部分反序列化漏洞环境
h1ck0r/public-apis
A collective list of free APIs
h1ck0r/RouteVulScan
Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件
h1ck0r/SBSCAN
SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN is a penetration testing tool focused on the spring framework that can scan springboot sensitive information/unauthorized for specified sites and scan and validate spring related vulnerabilities]
h1ck0r/Stirling-PDF
locally hosted web application that allows you to perform various operations on PDF files
h1ck0r/TongdaOATool
通达OA漏洞检测工具
h1ck0r/vercel_xss_platform
基于vercel Serverless Functions搭建的无服务xss平台
h1ck0r/WeblogicTool
WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）
h1ck0r/Z-Godzilla_ekp
哥斯拉webshell管理工具二次开发规避流量检测设备