h1d3r Goto Github PK

berserker

A list of useful payloads for Web Application Security and Pentest/CTF

better-cloudflare-ip

查找适合自己当前网络环境的优选cloudflare anycast IP

betterdefaultpasslist

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

bilibili

超仿b站弹幕播放器，超仿bilibili弹幕播放器，带后台

binabsinspector

BinAbsInspector: Vulnerability Scanner for Binaries 二进制静态漏洞分析

binary_blobs

binmap

system scanner

bkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

blackdex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phones or emulators, you can unpack APK File in several seconds.

blackhole

C# RAT (Remote Administration Tool)

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

bloodhound

Six Degrees of Domain Admin

bluebox-ng

Pentesting framework using Node.js powers, focused in VoIP.

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

bofallthethings

Creating a repository with all public Beacon Object Files (BoFs)

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

boopkit

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

brida

The new bridge between Burp Suite and Frida!

bridge

无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。

browsergather

Fileless web browser information extraction

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

browsersploit

BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal computers.

brut3k1t

Brute-force (dictionary attack, jk) attack that supports multiple protocols and services

bruteshark

Network Analysis Tool

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bshell

A webshell helps script kiddies to bypass disable_functions

bt2

Blaze Telegram Backdoor Toolkit is a post-exploitation tool that leverages the infrastructure of Telegram as a C&C

btpanel_tools