test502git Goto Github PK

log4j-fuzz-head-poc

批量检测log4j漏洞，主要还是批量fuzzz 头

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4j2scan-1

Log4j2 RCE Passive Scanner plugin for BurpSuite

medusa

:cat2:Medusa是一个扫描平台，目前包含200+个漏洞 http://medusa.ascotbe.com

metasploit-framework

Metasploit Framework

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

mx364476053

mysqlhoneypot

mysql蜜罐，获取攻击者微信。公众号：台下言书

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

nandmscan

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nerdbug

Full Nuclei automation script with logic explanation.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

oneforall

OneForAll是一款功能强大的子域收集工具

passworddic

2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典 子域名字典

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest_note

渗透测试常规操作记录

pentest_tools

收集一些小型实用的工具

poc_and_exp

搜集的或者自己写的poc或者exp

pyddoz

PyDDoZ is a powerful, human-friendly DDoS tool using application layer (L7) attack techniques. 🔥

python_code_audit

python 代码审计项目

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

r0capture

安卓应用层抓包通杀脚本

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

s2-057

S2-057 远程代码执行漏洞利用工具