c0ntr01 Goto Github PK

anti-xss

An open source XSS vulnerability scanner.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-iot-hacks

A Collection of Hacks in IoT Space so that we can address them (hopefully).

brutex

Automatically brute force all services running on a target.

bypasswaf

Add headers to all Burp requests to bypass some WAF products

cknife

Cknife

dhcpwn

All your IPs are belong to us.

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dtd-attacks

Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java

dvwa

Damn Vulnerable Web Application (DVWA)

fofa

fofa website

gaoqing

personal reposities

github_spider

使用代理调用github API爬去用户数据

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

java_deserialization_exploits

A collection of Java Deserialization Exploits

lightbulb-framework

Tools for auditing WAFS

loadlibrary

Porting Windows Dynamic Link Libraries to Linux

mysql-unsha1

Authenticate against a MySQL server without knowing the cleartext password

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙

nishang

Nishang - PowerShell for penetration testing and offensive security.

office_crash

onionscan

OnionScan is a free and open source tool for investigating the Dark Web.

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

plasmapulsar

PLASMA PULSAR

privesc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

psychopath

psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & web file upload implementations allowing to write files into the webroot (aka document root). The "blind" aspect is the key here and is inherent to dynamic testing usually conducted with no access to the source code or the filesystem.

rainmap-lite

Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

script

for f

serialkillerbypassgadgetcollection

Collection of bypass gadgets to extend and wrap ysoserial payloads