cainiaoxiaobai2016 Goto Github PK

metagoofil

Metadata harvester

metasploit-framework

Metasploit Framework

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

mitmf

Framework for Man-In-The-Middle attacks

ms17-010

MS17-010

nunjucks

A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)

osprey

panoptic

Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through path traversal vulnerabilities.

paramiko

The leading native Python SSHv2 protocol library.

password-repo

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

Custom pentesting tools

phemail

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test

php-webshells

Common php webshells. Do not host the file(s) on your server!

php_bugs

PHP代码审计分段讲解

poc-collect

各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新

pocsuite

Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

poet

Post-exploitation tool

python-libnmap

libnmap is a python library to run nmap scans, parse and diff scan results. It supports python 2.6 up to 3.4. It's wonderful.

radium-keylogger

Python keylogger with multiple features.

re-for-beginners

"Reverse Engineering for Beginners" free book

recon.sh

A toolset to track and organize output of reconnaissance tools

requests

Python HTTP Requests for Humans™ ✨🍰✨

reverse-shell-manager

A reverse shell manager via terminal

rtsp_authgrinder

A authentication brute forcing tool for the rtsp protocol

s7scan

a pentest scanner, To make excellent tools / 一个集七种功能的漏洞综合检测利用工具, 希望可以打造出一款优秀的渗透工具

scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

scanners-box

[Project-Kob-6]The toolbox of open source scanners - 安全行业从业人员自研开源扫描器合集👻

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

shadowbroker

The Shadow Brokers "Lost In Translation" leak