qianniaoge Goto Github PK

ssrf-king

SSRF plugin for burp Automates SSRF Detection in all of the Request

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrf-vuls

国光的手把手带你用 SSRF 打穿内网靶场源码

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

ssrftest

SSRF testing tool

staticanalysisqueries

A set of Code-ql/Joern queries to find vulnerabilities

sticky-keys-slayer

Scans for accessibility tools backdoors via RDP

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

struts2-057-exp

s2-057 最新漏洞分析和EXP脚本

struts2shell

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sunflower_get_password

一款针对向日葵的识别码和验证码提取工具

sunlogin_rce

向日葵 RCE

sunlogin_rce-1

向日葵RCE漏洞批量检测工具

sunlogin_rce_

某日葵远程rce

sunloginrce

向日葵RCE，网段扫描/中文显示

superdllhijack

SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

supplier

主流供应商的一些攻击性漏洞汇总

suricata-rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

suture_box

集合渗透测试常用工具进行一键扫描的缝合怪

svclessspy

svc WebShell

swagger-hack

自动化爬取并自动测试所有swagger接口

swagger-tool

swagger-ui 接口发送工具

sxf_atrust_sandbox_bypass

深信服零信任沙箱逃逸( 正常功能，所以我也不打算再提交CNVD, 给使用这款产品的用户介绍下功能效果）

sylas

数据库综合利用工具

sysbench

Scriptable database and system performance benchmark

sysmontools

Utilities for Sysmon

syswhispers2

AV/EDR evasion via direct system calls.

taie-autophishing

剑指钓鱼基建快速部署自动化