ti4nly

ti4nly's Stars

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go20.8k2412.5k2.5k

• vulhub/vulhub

  Pre-Built Vulnerable Environments Based on Docker-Compose

  Language:Dockerfile17.9k5791854.5k

• s0md3v/XSStrike

  Most advanced XSS scanner.

  Language:Python13.4k2742871.9k

• projectdiscovery/subfinder

  Fast passive subdomain enumeration tool.

  Language:Go10.3k1554611.3k

• projectdiscovery/nuclei-templates

  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  Language:JavaScript9.4k1951.5k2.7k

• hahwul/dalfox

  🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

  Language:Go3.8k55309424

• r0oth3x49/ghauri

  An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

  Language:Python3.1k38175315

• knownsec/ksubdomain

  无状态子域名爆破工具

  Language:Go2.3k3659277

• lz520520/railgun

  2.1k31107250

• Bearer/bearer

  Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

  Language:Go2.1k20332105

• hanc00l/nemo_go

  Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。

  Language:JavaScript1.7k26180245

• safe6Sec/Fastjson

  Fastjson姿势技巧集合

  1.7k175339

• veo/vscan

  开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

  Language:Go1.5k3040244

• zema1/watchvuln

  一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

  Language:Go1.4k1568157

• telegram-sgk/SGK_Sites_and_Bots

  免费在线社工库，免费Telegram社工库

  1.4k101588

• dwisiswant0/crlfuzz

  A fast tool to scan CRLF vulnerability written in Go

  Language:Go1.3k1715141

• SleepingBag945/dddd

  dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标

  Language:Go1.1k2291109

• niudaii/zpscan

  一个有点好用的信息收集工具。A somewhat useful information gathering tool.

  Language:Go1k154898

• a1phaboy/FastjsonScan

  Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency

  Language:Go995151995

• OWASP-Benchmark/BenchmarkJava

  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

  Language:Java67057961.1k

• chainreactors/spray

  Next Generation HTTP Dir/File Fuzz Artifact

  Language:Go52086140

• ac0d3r/Hyuga

  Hyuga 是一个用来监控带外(Out-of-Band)流量的工具。🪤

  Language:Go51991560

• jjf012/gopoc

  用cel-go重现了长亭xray的poc检测功能的轮子

  Language:Go29412368

• chainreactors/zombie

  The most powerful bruteforcer / password sprayer Artifact

  Language:Go219111413

• youki992/VscanPlus

  [VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnerabilities.

  Language:Go21931220

• lokerxx/JavaVul

  JAVA 安全靶场，IAST 测试用例，JAVA漏洞复现，代码审计，SAST测试用例，安全扫描（主动和被动），JAVA漏洞靶场，RASP测试用例 ； Java Security Testbed, IAST Test Cases, Java Vulnerability Reproduction, Code Auditing, SAST Test Cases, Security Scanning (Active and Passive), Java Vulnerability Testbed, RASP Test Cases

  Language:Java2182229

• Goqi/Ni

  Ni-nuclei二开

  Language:Go38314

• yuuuuu422/Gopo

  📌 a poc framework supported for YAML and custom script

  Language:Go12201

• TI4NLI4NG/TLScan

  Golang编写的一款GUI漏洞扫描工具，非开发人员也能通过yaml格式文件根据模板编写相应poc

  40

• ti4nly/pocScan_gui

  Language:Go1100