hariyopmail Goto Github PK

shodan-eye

Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sourceleakhacker

:bug: A multi threads web application source leak scanner

sqlinjectionwiki

一个专注于聚合和记录各种SQL注入方法的wiki

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

subenum

A basic enumeration tool that uses the most popular tools to automate the process in a single command.

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

testing

hari

tim-repo

Bug bounty payloads

tool

toolbox

渗透逆向个人工具箱整理backup

urlhunter

a recon tool that allows searching on URLs that are exposed via shortener services

urlprobe

vulnx

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

w13scan

Passive Security Scanner (被动式安全扫描器)

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

web-hunter

Crawl Google and Bing to find emails, subdomains and URLs associated to a target domain

webgoat

WebGoat 8.0

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

webhunt

Web App bug hunting

websy

Keep track of changes in website with WEBSY

whonix

Whonix is an operating system focused on anonymity, privacy and security. It's based on the Tor anonymity network, Debian GNU/Linux and security by isolation. DNS leaks are impossible, and not even malware with root privileges can find out the user's real IP. https://www.whonix.org

wooyun-payload

从wooyun中提取的payload，以及burp插件

wordlists-20111129

A lists of words based on common web directory and file names lists of words based on common web directory and file names. These wordlists are for Web security testing purpose.

wp-file-manager-cve-2020-25213

https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8

xupload

A tool for automatically testing whether the upload function can upload webshell

yandi-scanner

中小型企业内外网安全自动化评估系统&Network Security Vulnerability Scanner