qhwlpg Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

12306

php脚本自动查票

18weapons

十八般兵器，想用哪个点哪个，再也不用担心忘记带工具（主机安全、应用安全、网络安全、日志安全、代码安全、办公工具、运维工具、编辑器工具、开发工具）

antsword

**蚁剑是一款跨平台的开源网站管理工具

api-t00l

互联网厂商API利用工具。

autosqlitest

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

b374k

PHP Webshell with handy features

bbscan

A tiny Batch weB vulnerability Scanner

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

cache_test

cheatsheets

Penetration Testing/Security Cheatsheets

ci-codeccscan

codecc scan plugin(腾讯代码分析扫描工具集）

cknife

Cknife

clusterd

application server attack toolkit

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

cve-master

收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.

cyberbot

A lightweight batch scanning framework based on gevent.

datasec

dexposed

dexposed enable 'god' mode for single android application.

dsss

Damn Small SQLi Scanner

exserial

Java Untrusted Deserialization Exploits Tools

extracttvpasswords

tool to extract passwords from TeamViewer memory using Frida

fastir_collector

generate-and-crack-identity-card

generate and crack identity card

githarvester

gitminer

Tool for advanced mining for content on Github

gryffin

Gryffin is a large scale web security scanning platform

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。