j5s Goto Github PK

snowball

fofa+xray vul scan golang

snowshadow

雪影，一款桌面软件，集成了IP查询，端口扫描，系统命令，Webshell，C段存活扫描，后台目录扫描，远程控制等功能，以后还会增加其它实用功能。

snyk-security-scanner-plugin

Test and monitor your projects for vulnerabilities with Jenkins. This plugin is officially maintained by Snyk.

socks6

发一个自用了一小时多的代理工具，加密方法很复杂，不过欺骗 GFW 不够用。

sosrp

SOSRP Security 安全平台

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

spider-flow

新一代爬虫平台，以图形化方式定义爬虫流程，不写代码即可完成爬虫。

springangularapp

SpringsAngularApp is a sandbox web application with basic user management domain module. It allows you to login and create users and assign roles to them. Single page architecture supported by angular and secured by Spring Security allows using of static HTML pages. ORM based domain module provides clear management of domain objects with all OOP benefits. Application uses spring Internationalization and localization mechanisms. Most of business logic covered with unit tests. Used technologies: Spring 4 Boot(IOC, MVC, Security, Data, tx, Test) Hibernate 5.0.6 Gradle Git JavaScript, Angular(with some extra modules), Bootstrap, bower. PostgreSQL

springinspector

针对于Spring框架的自动Java代码审计工具

springscan

spring框架漏洞扫描

sqlexp

SQL 注入利用工具，存在waf的情况下自定义编写tamper脚本 dump数据

sqlmap

Automatic SQL injection and database takeover tool

src-experience

工欲善其事，必先利其器

ssr-bash-python

一个SSR多用户控制脚本

ssrf-vuls

国光的手把手带你用 SSRF 打穿内网靶场源码

stalker

A small library for performance evaluation of Java code. 这是一个用来对Java代码做性能评估的工具库。

starmap

一个轮子融合的子域名收集小工具

static-program-analysis-book

Getting started with static program analysis. 静态程序分析入门教程。

steal_piano

【steal piano】GitHub偷情分析工具！

stock-learning

股票入门之系统学习

stowaway

struts2burp

study_android_mchange

android 系统定制(魔改)

sub3suite

a free, open source, cross platform Intelligence gathering tool.

sub404

A python tool to check subdomain takeover vulnerability

subdns

协程子域名爆破工具

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

sucksav

This project used to learn golang and try to bypass AV

super-portscan

端口扫描工具