r0bbit Goto Github PK

apkanalyser

一键提取安卓应用中可能存在的敏感信息。

arbitraryfilereadlist

CTF中任意文件读取的fuzz列表 (Arbitrary file read fuzz list in CTF)

blasting-dictionary

网站后台、文件包含、WebShell等爆破字典！

burphttpforwardrequests

burp-http请求转发至其他模块的插件

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

crackjwtkey

JWT秘钥爆破脚本

cve-2022-26134-godzilla-memshell

domain_fuzz

exploits

Pwn stuff.

fastjson_rce_tool

fastjson rce 命令执行综合利用工具，一键操作,fastjson remote code execute poc

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gobfuscate

Obfuscate Go binaries and packages

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hd

百家活动网站 http://91078yhdt.com/

iathijackgenerate

白加黑的快速生成器（针对IAT类型）

jsencrypter

一个用于加密传输爆破的Burp Suite插件

lky_officetools

一键自动化 下载、安装、激活 Office 的利器。

origin

fastadmin 客服

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pear-admin-think

Pear admin is a front-end development framework based on layui

postconfluence

哥斯拉Confluence后渗透插件 MakeToken SearchPage ListAllUser AddAdminUser ListAllPage ........

powercat

netshell features all in version 2 powershell

redis-rogue-server

Redis(<=5.0.5) RCE

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shellcode-loader

Open repository for learning dynamic shellcode loading (sample in many programming languages)

shiroexploit

Shiro550/Shiro721 一键化利用工具，支持简单回显

shiroscan

Shiro<=1.2.4反序列化，一键检测工具

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

struts2vulstools

Struts2系列漏洞检查工具

superwordlist

基于实战沉淀下的各种弱口令字典