truly912 Goto Github PK

adfind

AdFind

allin

A flexible scanner

antsword

**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

antsword-loader

AntSword 加载器

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

behinder

“冰蝎”动态二进制加密网站管理客户端

beroot

Privilege Escalation Project - Windows / Linux / Mac

bypass-cdn

bypass_cdn

绕过CDN查找网站的真实IP地址

caidao-official-version

**菜刀官方版本，拒绝黑吃黑，来路清晰

crossc2

generate CobaltStrike's cross-platform payload

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dirsearch

Web path scanner

f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

finger

一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

githack

A `.git` folder disclosure exploit

godzilla

哥斯拉

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

havoc

The Havoc Framework.

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

network-security-study-notes

主要记录网络安全学习笔记，包含WEB基础、提权、APP渗透、内网横向移动、工具学习等

nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

oneforall

OneForAll是一款功能强大的子域收集工具

peiqi-wiki

WgpSec 公开POC WIKI文库 @PeiQi0 师傅

peiqi-wiki-book

面向网络安全从业者的知识文库🍃