htesiege Goto Github PK

amazon-aws-hack

Fully Automated Remote Hacking Tool for Amazon AWS

android-insecurebankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

autolocalprivilegeescalation

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

beyondz-platform

This is the "brains" of our systems. It's the starting point where Fellows and LCs signup and Join Braven. It's the master database of users. It's also the glue for letting our systems talk to each other.

blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

breacheddatascraper

Search breached data on private nodes, darkweb, internet, end-to-end channels

burp_data_collector

A Burp plugin that collects Burp request parameters, directories, paths and file names into the database for sorting

burpsuite

BurpSuite using the document and some extensions

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

crackmapexec

A swiss army knife for pentesting networks

crawlergo

A powerful dynamic crawler for web vulnerability scanners

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exploitpack

Exploit Pack - Project

exploits

Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity

f-scrack

fuzzdb

一个fuzzdb扩展库

hack

🔰渗透测试资源库🔰黑客工具🔰维基解密文件🔰木马免杀🔰信息安全🔰技能树🔰数据库泄露🔰

hack-tools

网上收集的一大哥的东西，大哥博客在后面

hawkeye

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

htesiege.github.io

htpwdscan

A python HTTP weak pass scanner

icebox

Virtual Machine Introspection, Tracing & Debugging

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

jaeles

The Swiss Army knife for automated Web Application Testing

k8cscan

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)