o0seven Goto Github PK

burpshiropassivescan

一款基于BurpSuite的被动式shiro检测插件

cve-2021-3156

dirbrute

多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

A malicious LDAP server for JNDI injection attacks

jr-scan

利用python3写的综合扫描工具，可“一键”实现基本信息收集（端口、敏感目录、WAF、服务、操作系统、子域名），支持POC扫描（可自行添加POC，操作简单），支持利用AWVS探测（需使用API接口），未来争取实现xray联动。

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

mind-map

各种安全相关思维导图整理收集

openrasp

🔥Open source RASP solution

reconftw

Simple script for full recon

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

web-security-learning

Web-Security-Learning