heh3 Goto Github PK

-

常见安全漏洞汇总

android-backup-extractor

Android backup extractor

asvs

Application Security Verification Standard

behinder

“冰蝎”动态二进制加密网站管理客户端

beholder_scanner

一款监控端口变化的系统——beholder_scanner端

beholder_web

一款监控端口变化的系统——beholder_web端

bloodhound

Six Degrees of Domain Admin

cve-2016-7255

fuzzdomain

FuzzDomain

googlesearchcrawler

a tool for crawl Google search results

heh3.github.io

icmptunnel

Tunnel IP over ICMP.

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jumpserver

开源跳板机(堡垒机):认证,授权,审计,自动化运维(Open source springboard machine ( fortress machine ): Authentication, authorization, audit, automated operation and maintenance).http://www.jumpserver.org

linux_check

linux入侵排查脚本_整合版

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

mail_auth

批量验证邮箱密码，支持gmail,163,126,yahoo,sina,outlook,hotmail,live等

mimikatz

A little tool to play with Windows security

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

nozes

Pentest cmd manager- Beta

okmobiledev.github.io

powershell-suite

My musings with PowerShell

public

my public code

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

scanners-box

安全从业人员常用开源工具资料合集

shadowbroker

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

softethervpn

A Free Cross-platform Multi-protocol VPN Software. * For support, troubleshooting and feature requests we have http://www.vpnusers.com/. For critical vulnerability please email us. (mail address is on the header.)

some-poc-or-exp

各种漏洞poc、Exp的收集或编写