Pinned Repositories
bonesi
BoNeSi - the DDoS Botnet Simulator
CeWL
CeWL is a Custom Word List Generator
dependency-check-plugin
Jenkins plugin for OWASP Dependency-Check. This can be used to monitor the java libraries used in an application and report if there are any known vulnerabilities (e.g. CVEs).
DependencyCheck
OWASP dependency-check is a utility that detects publicly disclosed vulnerabilities in application dependencies.
digestive
Dictionary cracking tool for HTTP Digest challenge/response hashes
django-DefectDojo
DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
dnsrecon
DNS Enumeration Script
dockerscan
Docker security analysis & hacking tools
dpapick
willpowerforever's Repositories
willpowerforever/CeWL
CeWL is a Custom Word List Generator
willpowerforever/dependency-check-plugin
Jenkins plugin for OWASP Dependency-Check. This can be used to monitor the java libraries used in an application and report if there are any known vulnerabilities (e.g. CVEs).
willpowerforever/dnsrecon
DNS Enumeration Script
willpowerforever/ffuf
Fast web fuzzer written in Go
willpowerforever/FOCA
Tool to find metadata and hidden information in the documents.
willpowerforever/gitleaks
Scan git repos (or files) for secrets using regex and entropy 🔑
willpowerforever/itext7
iText 7 for Java represents the next level of SDKs for developers that want to take advantage of the benefits PDF can bring. Equipped with a better document engine, high and low-level programming capabilities and the ability to create, edit and enhance PDF documents, iText 7 can be a boon to nearly every workflow.
willpowerforever/kubernetes-goat
Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster.
willpowerforever/mimikatz
A little tool to play with Windows security
willpowerforever/Mobile_Security
willpowerforever/osinttools
A collection of random OSINT scripts
willpowerforever/p6spy
P6Spy is a framework that enables database data to be seamlessly intercepted and logged with no code changes to the application.
willpowerforever/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
willpowerforever/pdfbox
Mirror of Apache PDFBox
willpowerforever/Red-Teaming-Toolkit
A collection of open source and commercial tools that aid in red team operations.
willpowerforever/red_team_tool_countermeasures
willpowerforever/scorecard
Security Scorecards - Security health metrics for Open Source
willpowerforever/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
willpowerforever/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
willpowerforever/spire
The SPIFFE Runtime Environment
willpowerforever/spring-boot-upload-file-lead-to-rce-tricks
spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
willpowerforever/spring-core-rce
Spring core rce
willpowerforever/spring-rce-war
willpowerforever/testssl.sh
Testing TLS/SSL encryption anywhere on any port
willpowerforever/trojan-source
Trojan Source: Invisible Vulnerabilities
willpowerforever/vault-guides
Example usage of HashiCorp Vault secrets management
willpowerforever/WebGoat
WebGoat 8.0
willpowerforever/xss-cheatsheet-data
This repository contains all the XSS cheatsheet data to allow contributions from the community.
willpowerforever/xss2png
PNG IDAT chunks XSS payload generator
willpowerforever/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.