arongmh Goto Github PK

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

deserizationecho

反序列化回显测试代码

dex2jar

Tools to work with android .dex and java .class files

dga

directorylister

A simple PHP based directory lister that lists a directory and all it's sub-directories and allows you to navigate there within.

dirpath_list

Dirpath_List 目录扫描字典

dirsearch

Web path scanner

dnspop

Analysis of DNS records to find popular trends

dockerscan

Docker security analysis & hacking tools

doom

DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

dzscan

Dzscan

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

eventcleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

ew

内网穿透(跨平台)

exp

收集各种各样的exp

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

exserial

Java Untrusted Deserialization Exploits Tools

f-middlewarescan

A vulnerability detection scripts for middleware services

f-nascan

Scanning a network asset information script

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

f-scrack-1

一款python编写的轻量级弱口令检测脚本，目前支持以下服务：FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。

fastjson

Fastjson姿势技巧集合

fastjson-blacklist

findwebshell

findWebshell是一款基于python开发的webshell检查工具，可以检查任意类型的webshell后门。

fingerprint

web应用指纹识别

flashscanner

Flash XSS Scanner

fshell

基于机器学习的分布式webshell检测系统

fuzsub

A Tool For Fuzzing Sub-domain.