kafroc's Stars
niklasb/libc-database
Build a database of libc offsets to simplify exploitation
matrix1001/glibc-all-in-one
🎁A convenient glibc binary and debug file downloader and source code auto builder
frohoff/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
ChrisTheCoolHut/Zeratool
Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
The-Z-Labs/linux-exploit-suggester
Linux privilege escalation auditing tool
shack2/SNETCracker
超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
NixOS/patchelf
A small utility to modify the dynamic linker and RPATH of ELF executables
SecWiki/linux-kernel-exploits
linux-kernel-exploits Linux平台提权漏洞集合
2dust/v2rayN
A GUI client for Windows, support Xray core and v2fly core and others
horsicq/XELFViewer
ELF file viewer/editor for Windows, Linux and MacOS.
al0ne/Vxscan
python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
yaklang/yakit
Cyber Security ALL-IN-ONE Platform
david942j/one_gadget
The best tool for finding one gadget RCE in libc.so.6
serfend/sgtlibc
a offline python-lib for search libc function
TideSec/TideFinger
TideFinger——指纹识别小工具,汲取整合了多个web指纹库,结合了多种指纹检测方法,让指纹检测更快捷、准确。
lcvvvv/kscan
Kscan是一款纯go开发的全方位扫描器,具备端口扫描、协议检测、指纹识别,暴力破解等功能。支持协议1200+,协议指纹10000+,应用指纹20000+,暴力破解协议10余种。
projectdiscovery/nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
GhostTroops/scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
0x727/ShuiZe_0x727
信息收集自动化工具
firmianay/CTF-All-In-One
CTF竞赛权威指南
pmiaowu/BurpShiroPassiveScan
一款基于BurpSuite的被动式shiro检测插件
Threezh1/JSFinder
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
Mr-xn/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
AntSwordProject/AwesomeScript
AntSword Shell 脚本分享/示例
gobysec/Goby
Attack surface mapping
WithSecureLabs/drozer-modules
AFLplusplus/AFLplusplus
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
firmadyne/firmadyne
Platform for emulation and dynamic analysis of Linux-based firmware
attify/Attify-Zigbee-Framework
GUI Framework on top of Killerbee
commoncriteria/application
Protection Profile for Application Software