bowman03 Goto Github PK

tessdata_best

Best (most accurate) trained LSTM models.

theharvester

E-mails, subdomains and names Harvester - OSINT

thinkphpgui

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

todesstern

A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities

toolsfx

基于kotlin+tornadoFx的跨平台密码学工具箱.包含编解码,编码转换,加解密, 哈希,MAC,签名,大数运算,压缩,二维码功能,ctf等实用功能,支持插件

toolsuite

Security tools

toxssin

An XSS exploitation command-line interface and payload generator.

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

trufflehog

Find credentials all over the place

tscanplus

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

tsojanscan

一个集成化BurpSuite漏洞探测插件

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

unexpected_information

Unexpected information 是用于标记请求包中的一些敏感信息、JS接口和一些特殊字段的BurpSuite 插件。

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

upx

UPX - the Ultimate Packer for eXecutables

uro

declutters url lists for crawling/pentesting

usernamedicttools

用户名密码字典生成工具(将中文汉字姓名转成14种格式的拼音、IP地址处理、网络设备密码生成)

v2rayn

A V2Ray client for Windows, support Xray core and v2fly core

vcenterkit

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

veil

Veil 3.1.X (Check version info in Veil at runtime)

viper

Redteam operation platform with webui 图形化红队行动辅助平台

viper-1

Go configuration with fangs

viper-2

Binary analysis and management framework

volatility

An advanced memory forensics framework

vulfi

vulnerabilitiesscanner

Vulnerabilities Scanner is a collection of Python scripts that help you identify potential security vulnerabilities in web applications. The repository includes four independent scanners to test for Content Security Policy (CSP), Cross-Site Request Forgery (CSRF), SQL Injection, and Cross-Site Scripting (XSS) vulnerabilities.

vulnerable-code-snippets

Twitter vulnerable snippets

vulscan

Advanced vulnerability scanning with Nmap NSE

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.