mxm-tools Goto Github PK
Name: x-tools
Type: Organization
Name: x-tools
Type: Organization
“冰蝎”动态二进制加密网站管理客户端
Some tools to monitor BillGates CnC servers
EarthWorm/Termite 停止更新
系统扫描器
二进制分析工具 Firmware Analysis Tool
爆破字典
Getting BlindElephant into a working state, and updating the plugin files
Six Degrees of Domain Admin
红蓝对抗跨平台远控工具
信息探测及扫描工具 DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking
Desktop application to efficiently search and analyze super-structured data. Powered by Zed.
浏览器攻击框架BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal computers.
bscan的是一款强大、简单、实用、高效的HTTP扫描器。
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
burpsuite extension for check and extract sensitive request parameter
基于Burp插件开发打造渗透测试自动化
一款基于BurpSuite的被动式shiro检测插件
burp伪造ip爆破脚本
A simple script just made for self use for bypassing 403
免杀shellcode加载器
Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols.
Web Content Discovery Tool
CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.
一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全狗,云锁,阿里云,云盾,腾讯云等,提供部分已知waf bypass 方案,中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等),支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
Cknife
猫猫Cs:基于Cobalt Strike[4.5]二开 (原dogcs二开移植)
Source Code Security Audit (源代码安全审计)
web向命令注入检测工具
分离免杀Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.
A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.