d066y Goto Github PK

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_monkey

Security Monkey

singularity

A DNS rebinding attack framework

sleuthql

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

ssh-auditor

The best way to scan for weak ssh passwords on your network

ssh-restrict-audit

Restrict user's SSH commands and audit their use

sudosh

Shell wrapper to run a login shell with `sudo` as the current user for the purpose of audit logging

swurg

Parse OpenAPI specifications, previously known as Swagger specifications, into Burp Suite for automating RESTful API testing – approved by PortSwigger for inclusion in their official BApp Store.

tcp-starvation

tokenvator

A tool to elevate privilege with Windows Tokens

vfeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

vulnerable-api

This repository contains an example Python API that is vulnerable to several different web API attacks.

vulnreport

Open-source pentesting management and automation platform by Salesforce Product Security

waf-detector

small script to detect web application firewall on any website

web-malware-collection

Clone of svn repository of http://insecurety.net/projects/web-malware/ project

win10-secure-baseline-gpo

Windows 10 and Server 2016 Secure Baseline Group Policy

winpayloads

Undetectable Windows Payload Generation

xxxcrapy

VulnSpider， based on xsscrapy.

yay

Yet another Yogurt - An AUR Helper written in Go

zulu

The Zulu fuzzer