secfb Goto Github PK

vunhuntertips

漏洞挖掘技巧及其一些工具集成

wahh_extras

The Web Application Hacker's Handbook - Extra Content

web-attack-cheat-sheet

Web Attack Cheat Sheet

web-fuzz-wordlists

Common Web Managers Fuzz Wordlists

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

web-sec-cheatsheet

webbatchrequest

WEB批量请求器（WebBatchRequest）是对目标地址批量进行快速的存活探测、Title获取，简单的banner识别，支持HTTP代理以及可自定义HTTP请求用于批量的漏洞验证等的一款基于JAVA编写的轻量工具。

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

webhacking

WebHacking checklist

webhunt

Web App bug hunting

weblogicscan

Weblogic一键漏洞检测工具，V1.5，更新时间：20200730

websecurityacademy

webshell

This is a webshell open source project

weevely3

Weaponized web shell

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

windows-ntapi-injector

Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses

windows-privesc

Windows PrivEsc ~ Tools | Cheat Sheets | Notes | More..

windows-privilege-escalation

Windows Privilege Escalation Techniques and Scripts

windows-rce-exploits

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.

winpwn

Automation for internal Windows Penetrationtest / AD-Security

wordlist-compendium

Personal compilation of wordlists & dictionaries for everything. Users, passwords, directories, files, vulnerabilities, fuzzing, injections, etc. In a peculiar order, sorry.

wordlist404

Small but effective wordlist for brute-forcing and discovering hidden things.

wordlistgen

Generates target specific word lists for Fuzzing with fuff

wordlists

All Type of Payloads

wordpress-bruteforce-list

WordPress Bruteforce List, Default paths and endpoints

wordpress-exploits

Collection of Exploit, CVES(Unauthenticated) and Wordpress Scanners

wss

gathering or searching websites that are vulnerable to sql injection ( GUI Tools )

wuzz

Interactive cli tool for HTTP inspection

x8

Hidden parameters discovery suite

xmlrpc-bruteforcer

Multi-threaded XMLRPC brute forcer using amplification attacks targeting WordPress installations prior to version 4.4.