404soul Goto Github PK

hash-algorithm-identifier

A python tool to identify different Hash Function Algorithms

htpwdscan

A python HTTP weak pass scanner

iis_shortname_scanner

an IIS shortname Scanner

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

javascriptgame

根据微信打飞机做的一个小游戏

lcyscan

leakscan

在线漏洞扫描

mind-map

各种安全相关思维导图整理收集

minos

一个基于Tornado/mongodb/redis的社区系统。

msfvenom-bc-generator

Metasploit msfvenom Bash Completions Generator

passive_scan

基于http代理的web漏洞扫描器的实现

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest_study

从零开始内网渗透学习

poc

poc from bugscan beebeeto

poc-t

简易并发框架，支持多线程和协程(单线程异步)两种并发模式．可用于: 批量漏洞验证，爆破&扫描，爬虫&采集

pocscan

Will to be a niubility scan-framework

pr0xy

教学用多线程扫描框架（代理扫描）

python_poc

一款python编写的Web安全检测PoC&&EXP框架

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

scanbackdoor

Webshell扫描工具，通过各种规则和算法实现服务器脚本后门查杀

scanners-box

安全行业从业人员自研开源扫描器合集(不收录w3af、brakeman等知名扫描工具）

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sql-injection

解决sqlmap不能跑的注入

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sqlmap-web-gui

PHP Frontend to work with the SQLMAP JSON API Server (sqlmapapi.py) to allow for a Web GUI to drive near full functionality of SQLMAP!

sqlmap_everywhere

latest version-无需Python环境的Sqlmap及制作方法

sreg

Sreg可对使用者通过输入email、phone、username的返回用户注册的所有互联网护照信息。

subdomainsbrute

A simple and fast sub domain brute tool for pentesters