do0x-ccc Goto Github PK

ksubdomain

无状态子域名爆破工具

kunyu

Kunyu, more efficient corporate asset collection

lazysign

Create fake certs for binaries using windows binaries and the power of bat files

mssql_sql_bypass_wiki

MSSQL注入提权,bypass的一些总结

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

pe_to_shellcode

Converts PE into a shellcode

photostudio

Photostudio是一款能进行自动化检测网页存活并实时给网页拍照的工具，通过调用Fofa/Zoomeye/360qua/shodan等 Api快速准确查询资产并进行网页截图，从而实施进一步的信息筛查。

poc-cve-2021-41773

proxy-list

A list of free, public, forward proxy servers. UPDATED DAILY!

proxy_list

爬取免费可用代理，供爬虫等工具使用

qingscan

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

shiroexp

shiro综合利用工具

springboot_scan

Springboot directory scanning

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

springscan

spring框架漏洞扫描

struts2-scan

Struts2全漏洞扫描利用工具

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

wallet-tracker

Track a list of crypto wallets to get notified when a new transaction is being processed.