Pinned Repositories
1book
《Web安全之机器学习入门》
active-scan-plus-plus
ActiveScan++ Burp Suite Plugin
additional-scanner-checks
Collection of scanner checks missing in Burp
aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
AndroidChecklist
Android应用审计checklist整理
angularjs-csti-scanner
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.
antSword
AntSword is a cross-platform website management toolkit.
API-Security
OWASP API Security Project
appmon
Documentation:
Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
sefanll's Repositories
sefanll/API-Security
OWASP API Security Project
sefanll/appmon
Documentation:
sefanll/apscheduler
Task scheduling library for Python
sefanll/Autorize
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
sefanll/bluescan
A powerful Bluetooth scanner for scanning BR/LE devices, LMP, SDP, GATT and vulnerabilities!
sefanll/BurpCrypto
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).
sefanll/Burpy_web_decode
burpy Best Practices
sefanll/CMAK
CMAK is a tool for managing Apache Kafka clusters
sefanll/crawlergo
A powerful dynamic crawler for web vulnerability scanners
sefanll/DahuaConsole
Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.
sefanll/ddddocr
带带弟弟 通用验证码识别OCR pypi版
sefanll/django
The Web framework for perfectionists with deadlines.
sefanll/docsify
🃏 A magical documentation site generator.
sefanll/exploits
sefanll/frida
Clone this repo to build Frida
sefanll/Impost3r
👻Impost3r -- A linux password thief
sefanll/Miscellaneous
百宝箱
sefanll/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
sefanll/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
sefanll/openrasp
🔥Open source RASP solution
sefanll/owasp-mstg
The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
sefanll/Packer-Fuzzer
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
sefanll/PeiQi-0day
sefanll/qark
Tool to look for several security related Android application vulnerabilities
sefanll/red_team_tool_countermeasures
sefanll/scalpel
scalpel是一款命令行扫描器，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。 原理：https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog
sefanll/w11scan
分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform
sefanll/w13scan
Passive Security Scanner (被动式安全扫描器)
sefanll/wappalyzer
Identify technology on websites.
sefanll/WDScanner
WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。