fgjghktyrty123 Goto Github PK

behinder

“冰蝎”动态二进制加密网站管理客户端

captcha-killer

burp验证码识别接口调用插件

cnseay

Seay源代码审计系统

enphp

a Open Source PHP Code Confusion + Encryption Project

exploitdb

The official Exploit Database repository

fuckcdn

CDN真实IP扫描，易语言开发

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

javaweb-sec

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

layerdomainfinder

Layer子域名挖掘机

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester

Linux privilege escalation auditing tool

mind-map

超详细的渗透测试思维导图

mysql-monitor

MySQL服务器执行SQL记录实时监控（WEB版本）

nosqlattack

NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.

nowatermark

remove watermark. 去除图片中的水印

oraclemonitor

plsql script to monitor Oracle Databases. 监控脚本 运维有力助手

oracleshell

oracle 数据库命令执行

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

recaptcha

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

secscan-authcheck

越权检测工具

shadowsocksr-native

翻墙 从容穿越党国敏感日 ShadowsocksR (SSR) native implementation for all platforms, GFW terminator

snetcracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

teemo

A Domain Name & Email Address Collection Tool

traduzir-paginas-web

Translate your page in real time using Google or Yandex

w8fuckcdn

Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.