luckxiao520 Goto Github PK

leaklooker

Find open databases with Shodan

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

nebula

"星云"业务风控系统，主工程

nmaps

采用Golang编写的新一代端口及指纹扫描器

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

perun

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

poccollect

Poc Collected for study and develop

poison-ivy-reload

Poison Ivy Remote administrator tool Reload

porttran

PortTran (.NET端口转发工具,支持任意权限)

powerladon

Large Network Penetration Scanner & Cobalt Strike, Ladon for PowerShell, vulnerability / exploit / detection / MS17010

proxy-list

Get PROXY List that gets updated everyday

public_tools

publicmonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

robber

Robber is open source tool for finding executables prone to DLL hijacking

saucerframe

python3批量poc检测工具

sharptoolsaggressor

内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~

snetcracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

sql-injection

解决sqlmap不能跑的注入

sqliscan

scan sqli

sqliv

massive SQL injection vulnerability scanner

sscan

一款src捡洞扫描器

superl-url

根据关键词，对搜索引擎内容检索结果的网址内容进行采集的一款轻量级软程序。 程序主要运用于安全渗透测试项目，以及批量评估各类CMS系统0DAY的影响程度，同时也是批量采集自己获取感兴趣的网站的一个小程序~~ 可自动从搜索引擎采集相关网站的真实地址与标题等信息，可保存为文件，自动去除重复URL。同时，也可以自定义忽略多条域名等。

tcpsynstealthy-portsscanner

A Simple Stealthy Python3 Script That Scans A Domain Or A Specific Ip For Range Of Open, Filtered And Closed Ports But It Scans Like A Ninja Undetected.

tentacle

Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

vanillarat

VanillaRat is an advanced remote administration tool completely coded in C# for Windows.

vaynescan

常用漏洞一键化自动扫描，解决平时渗透测试中的重复工作~

voyager

一个安全工具集合平台，用来提高乙方安全人员的工作效率，请勿用于非法项目

vulnerability-list

在渗透测试中快速检测常见中间件、组件的高危漏洞。

w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)