Pinned Repositories
authz0
🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
BrowserGhost
这是一个抓取浏览器密码的工具,后续会添加更多功能
BurpCrypto
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).
Bypass
免杀shellcode
DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥
DNSLog-Platform-Golang
DNSLOG平台 golang 一键启动版
GetMail
利用NTLM Hash读取Exchange邮件
godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
imaotai
i茅台app 每日自动预约 抢茅台
Log4j2Scan
Log4j2 RCE Passive Scanner plugin for BurpSuite
wooyun-Evil's Repositories
wooyun-Evil/tools
Python渗透漏洞工具
wooyun-Evil/Audit-Learning
记录自己对《代码审计》的理解和总结,对危险函数的深入分析以及在p牛的博客和代码审计圈的收获
wooyun-Evil/awesome-cyber-security
[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.
wooyun-Evil/awesome-risk-control
风控知识总结
wooyun-Evil/CVE-2019-2725
CVE-2019-2725 命令回显
wooyun-Evil/Fortify_Rule
Decode Fortify Rule Bin File Get XML File
wooyun-Evil/Go_Struts2
一款Python 3编写的Struts2安全检测集成工具
wooyun-Evil/ICS-Security-Tools
Tools, tips, tricks, and more for exploring ICS Security.
wooyun-Evil/KerberosUserEnum
Kerberos accounts enumeration taking advantage of AS-REQ
wooyun-Evil/OneForAll
OneForAll是一款功能强大的子域收集工具
wooyun-Evil/papers
my security summit papers
wooyun-Evil/shellcode-loader
csharp shellcode loader execute
wooyun-Evil/ToolPool
安全 & 运维小工具
wooyun-Evil/TrackRay
溯光 (TrackRay) 3 beta⚡渗透测试框架(资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap)
wooyun-Evil/Vxscan
python3写的综合扫描工具,主要用来敏感文件探测(目录扫描与js泄露接口),WAF/CDN识别,端口扫描,指纹/服务识别,弱口令探测,POC扫描,SQL注入等功能
wooyun-Evil/w12scan
🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)
wooyun-Evil/w13scan
Passive Security Scanner (被动式安全扫描器)
wooyun-Evil/w9scan
Plug-in type web vulnerability scanner
wooyun-Evil/yingji
应急相关内容积累