hariyopmail Goto Github PK

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

create-wordlist-for-domain

BB - tools

cve-2020-2021

CVE-2020-2021

dalfox

🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

dedecmscan

织梦全版本漏洞扫描

deksterecon

Web Application recon automation

depix

Recovers passwords from pixelized screenshots

devops

devops-master-class

devopsscripts

devopsscripts1

devsecops

:rocket: Sample automated workflows that automatically brings up services locally and in clouds

devsevops

devtraining-needit-madrid

This repository is used by the developer site training content, Madrid release. It is used for the Build the NeedIt App, Scripting in ServiceNow, Application Security, Importing Data, Automating Application Logic, Flow Designer, REST Integrations, Reporting and Analytics, Domain Separation, Mobile Applications, and Context-sensitive Help courses.

digit

Extract endpoints from specific Git repository for fuzzing

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dockerized-fuzzers

Dockerfiles for (un)popular fuzzers!

echopwn

Recon Automation for hackers by hackers

email2phonenumber

A OSINT tool to obtain a target's phone number just by having his email address

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2019-2618、CVE-2019-6340

exploit-workshop

A step by step workshop to exploit various vulnerabilities in Node.js and Java applications

extanalysis

Browser Extension Analysis Framework - Scan, Analyse Chrome, firefox and Brave extensions for vulnerabilities and intels

farmscan_domain_plus

collect domains

finalrecon

The Last Web Recon Tool You'll Need

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzscanner

一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。

garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

generator-burp-extension

Everything you need about Burp Extension Generation

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep

git-dorks-secrets

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.