1f3lse Goto Github PK

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

hrmstool

hrms tool

http-request-smuggling

HTTP Request Smuggling Detection Tool

http_server

基于python实现http服务器，支持文件夹/文件上传和下载

httprat

HTTPS GET RAT and Memory Loader

httpserver

红队内网环境中一个能快速开启HTTP文件浏览服务的小工具 ,可执行Webshell，可用于在内网不出网时文件的下载，启动时会根据网卡IPV4地址输出URL(本地回环除外)。

httpx

A next generation HTTP client for Python. 🦋

httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

hunt-sleeping-beacons

Aims to identify sleeping beacons

idea_exploit

Gather sensitive information from (.idea) folder for pentesters

ihoneybakfilescan_modify

批量网站备份文件扫描器，增加文件规则，优化内存占用

ilspy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

impacket

Impacket is a collection of Python classes for working with network protocols.

impacket_for_web

图形化Impacket 实现让Impacket部分横向模块可视化操作

ingram

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

inspur

Inspur vul repo

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

invoke-obfuscation

PowerShell Obfuscator

iot-vulhub

IoT 固件漏洞复现环境

iox

Tool for port forward & intranet proxy, just like lcx/ew, but better

iptables-web

golang开发的iptables web 管理程序

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

java-impacket-gui

java-impacket-gui

java-unserialization-study

QAQ Just study unserialize vulnerabilities in Java :)

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell

javacodeaudit

Getting started with java code auditing 代码审计入门的小项目

javasearchtools

javasec

自己学习java安全的一些总结，主要是安全审计相关