sfdota's Stars
m4ll0k/BBTz
BBT - Bug Bounty Tools (examples💡)
ctxis/DNSWatch
Python script to perform action on specified token sniffed from DNS request
bl4de/security-tools
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
SixGenInc/Noctilucent
Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise
charles2gan/GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
microsoft/Bringing-Old-Photos-Back-to-Life
Bringing Old Photo Back to Life (CVPR 2020 oral)
Brucetg/App_Security
hack2012/abuse-ssl-bypass-waf
Bypassing WAF by abusing SSL/TLS Ciphers
feisuanyz/Java-ADT
Java Automated Development Tool | Visual Editor | Automated DevOps
epi052/feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
crown-prince/Python_PoC
一款python编写的Web安全检测PoC&&EXP框架
haad/proxychains
proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.
streaak/keyhacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
WyAtu/Perun
Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架
Rvn0xsy/Cooolis-ms
Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具,它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码,帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。
Ridter/AMSI_bypass
Snowming04/CobaltStrike4.0_related
破解的cs4.0、cs4.0官方手册翻译和一些笔记
m0bilesecurity/RMS-Runtime-Mobile-Security
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
coffeehb/Some-PoC-oR-ExP
各种漏洞poc、Exp的收集或编写
c4bbage/w3a_SOC
Web日志审计与网络监控集合一身的平台
apache/metron
Apache Metron
Y4er/CVE-2020-2883
Weblogic coherence.jar RCE
AvasDream/pentesting-dockerfiles
Pentesting/Bugbounty Dockerfiles.
arbazkiraak/web-cache-deception-checker
Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages
anyant/rssant
蚁阅 - 让 RSS 更好用,轻松订阅你喜欢的博客和资讯
Clayeee/Win-Logs-Parse-tool
Adamloveve/sql_lab_primary
for beginner