philgushang Goto Github PK

bbscan

A fast vulnerability scanner

beef

The Browser Exploitation Framework Project

biu

网络资产发现、漏洞扫描

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

classifiedprotection

《网络安全等级保护基本要求》国家标准

cms-hunter

CMS漏洞测试用例集合

ctfd

CTFs as you need them

ctfd-whale

A plugin for CTFd which allow your users to deploy a standalone instance for challenges.

dirtycow

fbctf

Platform to host Capture the Flag competitions

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

findcrypt-yara

IDA pro plugin to find crypto constants (and more)

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

githack

A `.git` folder disclosure exploit

githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

iis_shortname_scanner

an IIS shortname Scanner

jekyll-theme-chirpy

A minimal, sidebar, responsive web design Jekyll theme, focusing on text presentation.

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

metasploit-framework

Metasploit Framework

mssql_sql_bypass_wiki

MSSQL注入提权,bypass的一些总结

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

ohmyzsh

🙃 A delightful community-driven (with 1500+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

rvm

Ruby enVironment Manager (RVM)

security-tools

Collection of small security tools created mostly in Python. CTFs, pentests and so on

shiroexploit

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

snetcracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

stegdetect

UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.

upx

UPX - the Ultimate Packer for eXecutables