tomyang9 Goto Github PK

hitcon-2021

HITCON 2021 x DEVCORE Wargame

holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

how-to-ask-questions-the-smart-way

本文原文由知名 Hacker Eric S. Raymond 所撰寫，教你如何正確的提出技術問題並獲得你滿意的答案。

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

httpsuite

A toolkit for web reconnaissance, it's fast and easy to use.

huntkit

Docker - Ubuntu with a bunch of PenTesting tools and wordlists

iced

High performance and correct x86/x64 disassembler, assembler, decoder, encoder for .NET, Rust, JavaScript

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

ics-windows

igscan

WgpSec Team IGScan 一款信息收集工具

imonitor

iMonitor（冰镜 - 终端行为分析系统）

imperva_gzip_waf_bypass

infinite-storage-glitch

ISG lets you use YouTube as cloud storage for ANY files, not just video

infosec_reference

An Information Security Reference That Doesn't Suck

initial-access-broker-landscape

inject-assembly

Inject .NET assemblies into an existing process

injection

Windows process injection methods

intelowl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

intelspy

Perform automated network reconnaissance scans

invoke-zerologon

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf.

iptable_vis

visualise your iptables chains

iriusrisk

IriusRisk Community

jeeves

Jeeves SQLI Finder

jfrog-cve-2022-21449

jsencrypter

一个用于前端加密Fuzz的Burp Suite插件

jsrainbow

BurpSuite插件，调用外部js处理payload，可以有效解决前端js对某些字段加密的问题，以及做fuzz时，处理逻辑可以在js文件中定义，不必写python、java等代码，灵活高效，你值得拥有。

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kaimonkey

KaiMonkey provides example vulnerable infrastructure to help cloud security, DevSecOps and DevOps teams explore and understand common cloud security threats exposed via infrastructure as code.

kaliintelligencesuite

Kali Intelligence Suite (KIS) shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by executing standard penetration testing tools. The collected data is internally stored in a structured manner to allow the fast identification and visualisation of the collected information.

kasperskyhook

Hook system calls on Windows by using Kaspersky's hypervisor