baigoocn Goto Github PK

allscanner

数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.

baiduurlspider

百度URL采集工具

bishe

毕业设计，已经完成

blasting_dictionary

爆破字典

cve-2018-2628-multithreading

WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

deeplearning

Deep Learning (Python, C/C++, Java, Scala)

deeplearntoolbox

Matlab/Octave toolbox for deep learning. Includes Deep Belief Nets, Stacked Autoencoders, Convolutional Neural Nets, Convolutional Autoencoders and vanilla Neural Nets. Each method has examples to get you started.

dirbrute

多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

f-nascan

Scanning a network asset information script

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

fastportscan

使用TCP协议探测端口开放情况，速度超快，可自定义扫描端口、线程数。Use the TCP protocol to detect the open port, ultra-fast, customizable scan ports, threads.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hack_tools_for_me

自己为了方便收集的小工具

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

ladongo

Ladon Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

micro8

oneforall

OneForAll是一款功能强大的子域收集工具

pentest-tools

Intranet penetration tools

pentest_study

从零开始内网渗透学习

publicmonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

python

python黑客与一些脚本

shadowproxy

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sparse_class_rbm

Classification RBM for Sparse Input

subdomainfinder

SubdomainFinder is a tool for collecting subdomains. It increases the range of information gathering during the penetration test.