p0desta

p0desta's Stars

• miss-mumu/developer2gwy

  公务员从入门到上岸，最佳程序员公考实践教程

  8.8k7873753

• cooderl/wewe-rss

  🤗更优雅的微信公众号订阅方式，支持私有化部署、微信公众号RSS生成（基于微信读书）v2.x

  Language:TypeScript5.3k25276909

• KingOfBugbounty/KingOfBugBountyTips

  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Language:Go4.2k23511815

• RubyMetric/chsrc

  chsrc 全平台通用换源工具与框架. Change Source everywhere for every software

  Language:C4.1k1768163

• hahwul/dalfox

  🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

  Language:Go3.8k55308423

• hmjz100/Online-disk-direct-link-download-assistant

  一个基于 JavaScript 的网盘文件下载地址获取工具。基于【网盘直链下载助手】修改 ，自用，去推广，无需输入“暗号”即可使用，甚至比原版还要好用！

  Language:JavaScript2.4k1013499

• mzz2017/gg

  一个支持节点与订阅链接的 Linux 命令行代理工具 | A command-line tool for one-click proxy in your research and development without installing v2ray or anything else (only for linux)

  Language:Go1.4k873117

• jar-analyzer/jar-analyzer

  Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码

  Language:Java1.1k990103

• kkbo8005/mitan

  密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、端口扫描、批量信息权重查询、密码字典等功能

  1.1k92478

• honmashironeko/ProxyCat

  一款部署于云端或本地的代理池中间件，可将静态代理IP灵活运用成隧道IP，提供固定请求地址，一次部署终身使用

  Language:Python1.1k611108

• glitchedgitz/cook

  A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

  Language:Go1k1915110

• c0olw/NacosRce

  Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

  Language:Java73951285

• lemonlove7/dirsearch_bypass403

  目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别

  Language:Python72751259

• FindAllTeam/FindAll

  Automated analysis of network security emergency response tools.（自动化分析网络安全应急响应工具）

  63951241

• arkadiyt/bounty-targets

  This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

  Language:Ruby6212131108

• bit4woo/burp-api-drops

  burp插件开发指南

  Language:Java6073399

• DVKunion/SeaMoon

  月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具

  Language:TypeScript544339112

• woodpecker-framework/ysoserial-for-woodpecker

  给woodpecker框架量身定制的ysoserial

  Language:Java523131071

• kN6jq/gatherBurp

  一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。

  Language:Java50662628

• Edr4/XSS-Bypass-Filters

  4924076

• z2p/sweetPotato

  基于burpsuite的资产分析工具

  Language:Java42971221

• l3yx/Choccy

  GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)

  Language:Go40441040

• rohsec/LEAKEY

  LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and easy to add checks for new services.

  Language:Shell3465247

• Fly-Playgroud/Boom

  Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\检测工具

  30352218

• Zjackky/CodeScan

  一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具

  Language:Go26920

• novysodope/javaeasyscan

  javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手

  Language:Java2653211

• rzte/agentcrack

  不那么一样的 Java Agent 内存马

  Language:Java2553035

• chaitin/xapp

  2447107

• z-bool/Venom-Crawler

  毒液爬行器：专为捡洞而生的爬虫神器

  Language:Go1904825

• hanbufei/findUriInjs

  一个既可主动，又可被动提取链接的burp插件

  Language:Java4221