bbghunter Goto Github PK

crackminapp

(反编译微信小程序)一键获取微信小程序源码(傻瓜式操作), 使用了C#加nodejs制作

crt.sh

(Unofficial) Python API for https://crt.sh

crx-extractor

浏览器插件分析工具

csp-evaluator

cssinjection

Stealing CSRF tokens with CSS injection (without iFrames)

cve-2020-1472

（域控提权工具）Test tool for CVE-2020-1472

cve-2020-1473

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2020-6519

CSP bypass方案

ddddocr

带带弟弟 通用验证码识别OCR pypi版

de4dot

.NET deobfuscator and unpacker.

debugtron

Debug in-production Electron based app

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

dhook

DHook是一个交互式自定义动态hook的工具。通过javaagent+ASM技术对运行时的java应用进行字节码修改，并可以以界面和配置文件的方式来增加hook点，修改执行方法的返回值以及参数等。如破解cs等

dirsearch

目录扫描脚本

dnsautorebinding

ssrf、ssrf内网地址fuzz、dns二次rebinding、支持ipv4/ipv6、支持ip地址转码、dns记录污染

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dnslog-1

dnslog-go

DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具，自带WEB界面

dnspyex

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

droidsslunpinning

安卓证书锁定解除的工具

enumerate-iam

Enumerate the permissions associated with AWS credential set

eventcleaner

Windows 单条日志删除工具

evilurl

Generate unicode evil domains for IDN Homograph Attack and detect them.

exploit-database

漏洞利用库

eyes.sh

Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

fapro

Fake Protocol Server

fastjson

Fastjson姿势技巧集合

fastjson-remote-code-execute-poc

fastjson PoC合集

fastjson_rce_tool

fastjson命令执行自动化利用工具， remote code execute，JNDI服务利用工具 RMI/LDAP，LDAP反序列方式部分回显