a1phard Goto Github PK

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

bypassantivirus

cobalt4.4

WIPE YOUR ASS WITH THE REAL COBALT STRIKE

damnwebscanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

kong

🦍 The Cloud-Native API Gateway

log4j_poc

magiskonwsa

Integrate Magisk root and Google Apps (OpenGApps) into WSA (Windows Subsystem for Android)

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mimipenguin

A tool to dump the login password from the current linux user

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

sec-admin

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

shadowsocks_install

Auto Install Shadowsocks Server for CentOS/Debian/Ubuntu

shuize_0x727

信息收集自动化工具

striker

Striker is an offensive information and vulnerability scanner.

veil

Veil 3.1.X (Check version info in Veil at runtime)

weblogicscanlot

WeblogicScanLot系列，Weblogic漏洞批量检测工具，V2.2

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

zf-system

正方教务系统源码