xmsss814 Goto Github PK

airfly

机场订阅一键生成ip代理池，让机场起飞！

antsword

**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

bandit

Bandit is a tool designed to find common security issues in Python code.

clashx

cpython

The Python programming language

fuckcdn

CDN真实IP扫描，易语言开发

github-cve-listener

无需服务器的GitHub实时漏洞利用工具监听器，目前支持微信/TG推送，中文版(https://github.com/Kira-Pgr/Github-CVE-Listener/blob/main/README_ZH.md)

glass

Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。

godzilla

哥斯拉

gofish

Keep your fish fresh! :tropical_fish:

gosec

Golang security checker

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

i-s00n

impacket

Impacket is a collection of Python classes for working with network protocols.

iron

An Extensible, Concurrent Web Framework for Rust

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

kernelhub

:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

kunlun-m

KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon9.1.4内置150个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

mysqlmonitor

监控mysql执行sql语句的小工具，用于代码审计

nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

nosqlattack

NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

rehabilitationguide

颈椎病腰突康复指南，为程序员群体提供简单可靠的康复指南。

rustdesk

Virtual / remote desktop infrastructure for everyone! Open source TeamViewer / Citrix alternative.

rustlings

:crab: Small exercises to get you used to reading and writing Rust code!