sxx2022 Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

3klcon

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

afrog

一个挖洞工具 - A tool for finding vulnerabilities

ahmyth-modified-version

AhMyth is an popular open source android rat. But the official AhMyth contains many bugs. For an example, you can't fetch victim's files from the remote server using official AhMyth. So that we have modified the rat and remove all bugs and also added some extra features.

ai_wiki

AI实践：各类知识和样例汇总，包括大模型、编程、机器学习、 深度学习、强化学习、图神经网络，语音识别、NLP和图像识别等

antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

aopo

内网自动化快速打点工具｜资产探测｜漏洞扫描｜服务扫描｜弱口令爆破

apikiller

API Security DAST & Oprations

apisandbox

Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

app_permissions

基于MobSF API测试安卓app权限的工具，用于app合规检查，查看敏感权限是否在隐私政策中说明

applicationscanner

An open source application scanning tool

applicationscannerwin

🔥🔥🔥🚀Windows平台版本的apk、ipa、so、aar、jar等库代码扫描工具

appsyscallscan

app隐私合规检查

apt_t00ls

高危漏洞利用工具

artillery

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

auto.js

A UiAutomator on android, does not need root access(安卓平台上的JavaScript自动化工具)

auto_proxy

利用IP地址池进行自动切换Http代理，防止IP封禁。

banli

Banli-高危资产识别和高危漏洞扫描

berylenigma

ffffffff0x team toolset for penetration testing, cryptography research, CTF and daily use. | ffffffff0x 团队工具集，用来进行渗透测试，密码学研究，CTF和日常使用。

burp-suite-book

burp_plug

burpjslinkfinderv2

Burp Extension for a passive scanning JS files for endpoint links.

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

bylibrary

一个漏洞POC和EXP公开项目

camille

基于Frida的Android App隐私合规检测辅助工具

cobaltstrike4.4_cdf

cobaltstrike4.x版本破解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子认证