1trapbox Goto Github PK

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

evil-winrm

The ultimate WinRM shell for hacking/pentesting

fintoch-contracts

fiora

Fiora：漏洞PoC框架Nuclei的图形版。快捷搜索PoC、一键运行Nuclei。即可作为独立程序运行，也可作为burp插件使用。

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdict

渗透测试Payload字典、Fuzz Payload字典。Penetration testing Payload dictionary, Fuzzy Payload dictionary

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

githack

A `.git` folder disclosure exploit

hackbar

HackBar plugin for Burpsuite

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hae

HaE - Highlighter and Extractor, 赋能白帽 高效作战

htpwdscan

HTTP weak pass scanner

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

match-replace-burp

Useful "Match and Replace" burpsuite rules

mubeng

An incredibly fast proxy checker & IP rotator with ease.

notionnext

一个使用 NextJS + Notion API 实现的，部署在 Vercel 上的静态博客系统。为Notion和所有创作者设计。

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

onedrive-vercel-index

OneDrive public directory listing, powered by Vercel and Next.js

oneforall

OneForAll是一款功能强大的子域收集工具

opendoor

OWASP WEB Directory Scanner

openwrt-packages

openwrt常用软件包

owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

passive-scan-client

Burp被动扫描流量转发插件

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF