1trapbox Goto Github PK

1box

nothing

3x-ui

Xray panel supporting multi-protocol multi-user expire day & traffic & ip limit (Vmess & Vless & Trojan & ShadowSocks)

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

auto_proxy

利用IP地址池进行自动切换Http代理，防止IP封禁。

awesome-pentest-note

Penetration Test ☞ Experience/thought/summary

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

burpcrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

burpfakeip

服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

burploaderkeygencnf

BurpSuite Pro Loader & Keygen & Translator Fix ( BurpSuite version v2020.1 - ∞ )

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

bypass-cdn

bypasssuper

Bypass 403 or 401 or 404

captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

chunked-coding-converter

Burp suite 分块传输辅助插件

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cointop

A fast and lightweight interactive terminal based UI application for tracking cryptocurrencies 🚀

cscan

🐝 C段快速扫描工具 Cscan

cve

Gather and update all available and newest CVEs with their PoC.

ddddocr

带带弟弟 通用验证码识别OCR pypi版

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dictpasswords

【用户名，密码】爆破字典

digital-privacy

Information Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

dirsearch

Web path scanner