kakakpy Goto Github PK

burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

burp_collaborator_http_api

Burp Suite Collaborator HTTP API

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpcrlfplugin

Another plugin for CRLF vulnerability detection

burpcrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

bypassav

Cobalt Strike插件，用于快速生成免杀的可执行文件

carbonator

Integris Security Carbonator - The Burp Suite Pro extension that automates scope, spider & scan from the command line. Carbonator helps automate the vulnerability scanning of web applications. Either 1 or 100 web applications can be scanned by issuing a single command. Carbonator is now available from within Burp Suite Pro through the BApp Store.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

checksql

chunked-coding-converter

Burp suite 分块传输辅助插件

cobra

Source Code Security Audit (源代码安全审计)

code-check

code2sec.com

xmind\code\articles for my personal blog 个人博客上的资源备份存储，也是个人分享的汇总

coeus

Android apk/sdk Scan包括android apk/sdk 安全审计代码扫描以及国内政策扫描

consulo-java

JVM platform plugin. Languages: Java, Bnd, Java Manifest, Java SPI

crossc2

来自 gloxec 的 CrossC2 frameworkfork 备份 2.0版本

crossc2-1

generate CobaltStrike's cross-platform payload

ctftools

Personal CTF Toolkit

cuteit

Make a malicious IP a bit cuter 😄 (IP obfuscator)

cve-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

domainnamepredictor

一个简单的现代化公司域名使用规律预测及生成工具

dpia

GDPR个人数据合规评估

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.