9tail123 Goto Github PK

ahrid

AHRID - Analysis Hacker's Real-ID Platform

airbug

Airbug(空气洞)，收集漏洞poc用于安全产品

aksk_tool

AK利用工具，AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM操作，OSS/COS管理，RDS管理，域名管理，添加RAM账号等

alicloud-tools

阿里云ECS、策略组辅助小工具

apkleaks

Scanning APK file for URIs, endpoints & secrets.

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

awesome-seo

Google SEO研究及流量变现

bitcoin-phpminer

phpMiner for bitcoin

bt_panel_privilege_escalation

宝塔面板Windows版提权方法

burp-info-extractor

burpsuite extension for extract information from data

burpcustomizer

Because just a dark theme wasn't enough!

cobaltstrike

CobaltStrike's source code

coremailuploadrce

Coremail任意文件上传漏洞POC

cpulimit

CPU usage limiter for Linux

cracksleeve

破解CS4.0

curl

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET and TFTP. libcurl offers a myriad of powerful features

exploits

f-nascan

Scanning a network asset information script

f8x

红/蓝队环境自动化部署工具

frida-apk-unpack

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzywuzzy

Fuzzy String Matching in Python

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

go-strip

清除Go编译时自带的信息

graphqlmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

hackerdicts

Password list from SSH honeypot

hackerone-reports

Top disclosed reports from HackerOne

heapdump_tool

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等