baiqll Goto Github PK

hiban

url 历史版本遍历工具

hiseek

一个快速从web.archive.org找到目标的工具

ja-netfilter

A javaagent framework

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

knr-xss-payloads

Payloads For XSS

kuboard-press

Kuboard 是基于 Kubernetes 的微服务管理界面。同时提供 Kubernetes 免费中文教程，入门教程，最新版本的 Kubernetes v1.23.4 安装手册，(k8s install) 在线答疑，持续更新。

laravel-cve-2021-3129-exp

magiskonwsa

Integrate Magisk root and Google Apps (OpenGApps) into WSA (Windows Subsystem for Android)

marshalsec

mqtts

MQTT安全测试工具 (MQTT Security Tools)

mssql_sql_bypass_wiki

MSSQL注入提权,bypass的一些总结

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

proxifier-keygen

pyinstxtractor

PyInstaller Extractor

quarkspwdump

Quarks PwDump is a native Win32 tool to extract credentials from Windows operating systems.

redisjson

RedisJSON - a JSON data type for Redis

rustdesk

Open source virtual / remote desktop infrastructure for everyone! The open source TeamViewer alternative. Display and control your PC and Android devices from anywhere at anytime.

shuize_0x727

信息收集自动化工具

src-http

Goalng 编写的简易web 服务，一键部署exp

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档