dz-test Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

1asas

1asas1

afrog

A Vulnerability Scanning Tools For Penetration Testing

agartha

a burp extension for dynamic payload generation to detect injection flaws (LFI, RCE, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitations.

apkurlgrep

Extract endpoints from APK files

argumentinjectionhammer

A Burp Extension designed to identify argument injection vulnerabilities.

bugbounty

RepoToStoreBugBountyInfo

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

certwatcher

CertWatcher is a tool for capture and tracking certificate transparency logs, using YAML templates based DSL.

commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

ctfium

Collection of CTF pwn challenges.

datasurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Secuirty Numbers and More From Text

dnsreaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

docs-studio

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fakedns

A regular-expression based python MITM DNS server with support for DNS Rebinding attacks

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

fgit

fresh-dns-servers

Fresh DNS servers

fuzzing-templates

Community curated list of nuclei templates for finding unknown security vulnerabilities.

gf-patterns

Collection grep patterns for Tom Hudson a.k.a Tomnomnom tools namely gf

gf-patterns-collection

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

h4cks

Combination of all my Resources, Links & Scripts

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

hwioauthbundle

OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了十种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

jsmon

a javascript change monitoring tool for bugbounties