adra1n Goto Github PK

3viltwinattacker

This tool create an rogue Wi-Fi access point , purporting to provide wireless Internet services, but snooping on the traffic.

appfinger

WhatWeb in China

closurether

network traffic hijack via Node

cookiehacker

Chrome extension, very easy to use. Cookies from: JavaScript document.cookie/Wireshark Cookies etc.

dirfuzz

多线程网站目录穷举扫描

doc

doc

dzscan

fuck12306

12306 图片验证码识别测试

fuzzdb

This project is a mirror of the project on google-code http://code.google.com/p/fuzzdb/

githack

A `.git` folder disclosure exploit

gittrojan

google_search

newebuy

New Edition And New Design

phpmyxss

A XSS Project

phpvulhunter

A tool that can scan php vulnerabilities automatically using static analysis methods

pocsuite

Pocsuite 是知道创宇安全研究团队打造的一款基于漏洞与 PoC 的远程漏洞验证框架，Pocsuite is A remote vulnerability test framework developed by Knownsec Security Team.

proxpy

Automatically exported from code.google.com/p/proxpy

pupy

Pupy is a remote administration tool with an embeded Python interpreter, allowing its modules to load python packages from memory and transparently access remote python objects. The payload is a reflective DLL and leaves no trace on disk

pynmaper

nmap的py扫描验证脚本

pysecurity

Python tutorials

pyspider

A Powerful Spider System with Powerful WebUI

python-webshell

webshell writen in python

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

shellshock_scanner

Python Scanner for "ShellShock" (CVE-2014-6271)

static-dom-xss-scanner

Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.

vulcan

A gevent spider ,support webkit for dom parsing.

wappalyzer

Cross-platform utility that uncovers the technologies used on websites.

webshell

This is a webshell open source project

xss-callback

A lightweight HTTP Server that exploits XSS victim's session automatically

xsstracer

A small python script to check for Cross-Site Tracing (XST)