xiaolushuo Goto Github PK

staticanalyzer

StaticAnalyzer is a burp plugin that can be used to perform static analysis of the response information from server during run time. It will search for specific words in the response that is mentioned in the vectors.txt

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

subdomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, and Github.

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sublist3r

Fast subdomains enumeration tool for penetration testers

subra

A Web-UI for subdomain enumeration (subfinder)

subscraper

External pentest tool that performs subdomain enumeration through various techniques. In addition, SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.

sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token

summit_ppt

各种大会PPT PDF

super-mario-bros-a3c-pytorch

superwordlist

基于实战沉淀下的各种弱口令字典

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

swiftnessx

A cross-platform note-taking & target-tracking app for penetration testers.

szhe_scan

碎遮SZhe_Scan Web漏洞扫描器，基于python Flask框架，对输入的域名/IP进行全面的信息搜集，漏洞扫描，可自主添加POC

t1tl3

A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title 😌

tabler-icons

A set of over 1600 free MIT-licensed high-quality SVG icons for you to use in your web projects.

taborator

A Burp extension to show the Collaborator client in a tab

tagdown

A bookmarks manager Chrome extension.

taoman

快速收集 https://src.edu-info.edu.cn 平台学校子域名工具

terraform_hacking_lab

Terraform setup for hackazon, dvwa and juice shop on AWS EC2.

tesserocr-windows_build

test-cors.org

A tool to help test CORS requests

the-way-to-go_zh_cn

《The Way to Go》中文译本，中文正式名《Go 入门指南》

the_cyber_plumbers_handbook

Free copy of The Cyber Plumber's Handbook

tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

timeinator

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.

tinysearch

🔍 Tiny, full-text search engine for static websites built with Rust and Wasm

tldextract

Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.

tldraw

A tiny little drawing app.

tooljet

Extensible low-code framework for building business applications. Connect to databases, cloud storages, GraphQL, API endpoints, Airtable, etc and build apps using drag and drop application builder. Built using JavaScript/TypeScript. 🚀