r00tuser111 Goto Github PK

actuatorexploittools

一款用于攻击spring boot actuator的集成环境，目前集成三种攻击方式，支持1.x、2.x

angelsword

Python3编写的CMS漏洞检测框架

aquatone

A Tool for Domain Flyovers

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

certbook

certbook

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

cmspoc

CMS渗透测试框架-A CMS Exploit Framework

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

dnsautorebinding

ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6

easy-tips

A little Tips in my Code Career with PHP :fire:

fuzz-wooyun-org

WooYun Fuzz 库

jndiexploit

A malicious LDAP server for JNDI injection attacks

justtrustmeplus

jwtdecompress

解压缩由jjwt库压缩的jwt token，便于查看jwt token中的数据

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

linux-exploit-development-tutorial

a series tutorial for linux exploit development to newbie.

mind-map

各种安全相关思维导图整理收集

nuclei-docker

passiveftp

FTP passive mode send evil payload tool, support fastcgi and redis payload (generate by gopherus)

pd-actions-1

Continuous recon and vulnerability assessment using Github Actions.

php_imap_open_exploit

Bypassing disabled exec functions in PHP via imap_open

printnightmare

publiccms

200多万行代码修改 持续迭代7年 现代化java cms，轻松支撑千万数据、千万PV；支持静态化，服务器端包含; 目前已经拥有全球0.0004%(w3techs提供的数据)的用户，语言支持中、繁、日、英；是一个已走向海外的成熟CMS产品

pythonscript

一些常用的python脚本

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security_whitepapers

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi