thanatoskira Goto Github PK

firefox-security-toolkit

A tool that transforms Firefox browsers into a penetration testing suite

fixhub

A free and open-source web deployment system based on Laravel 5.3

flashlight

Pentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information rapidly on target networks. So Flashlight should be the choice to automate discovery step during a penetration test. In this article, usage of Flashligh application will be explained.

flexidie

Source code and binaries of FlexiSpy from the Flexidie dump

fluxion

fonts

Patched fonts for Powerline users.

fox-scan

Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.

front-end-tutorial

:panda_face:最全的资源教程-前端涉及的所有知识体系

fuzsub

A Tool For Fuzzing Sub-domain.

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

fuzzdb

Official FuzzDB project repository

gcat

A fully featured backdoor that uses Gmail as a C&C server

genpass

**特色的弱口令生成器

githack

A `.git` folder disclosure exploit

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

gitminer

Tool for advanced mining for content on Github

gitrob

Reconnaissance tool for GitHub organizations

gitscan

gnmap-parser

Bash script to parse multiple Nmap (.gnmap) exports into various plain-text formats for easy analysis.

gortcp

gourdscan

hackvault

A container repository for my defensive/offensive hacks!

hashpump

A tool to exploit the hash length extension attack in various hashing algorithms

hawkeye

GitHub 泄露监控系统

hellraiser

Vulnerability Scanner

hitcon-2016-windows-10-x64-edge-0day-and-exploit

HitCon 2016 Windows 10 x64 edge 0day and exploit

hostrecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

http-over-protocol

HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy

httphijack

使用Javascript实现前端防御http劫持及防御XSS攻击，并且对可疑攻击进行上报

httpie

CLI HTTP client, user-friendly curl replacement with intuitive UI, JSON support, syntax highlighting, wget-like downloads, extensions, etc.