kbfey Goto Github PK

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

oneforall

OneForAll是一款功能强大的子域收集工具

outguess

An unmaintained fork of the OutGuess steganographic tool. Try https://github.com/resurrecting-open-source-projects/outguess for possibly a better option.

phpjiami_decode

pikachu

一个好玩的Web安全-漏洞测试平台

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

rsatool

rsatool can be used to calculate RSA and RSA-CRT parameters

scrabble

Simple tool to recover .git folder from remote server

shodan-python

The official Python library for Shodan

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sqlmap

Automatic SQL injection and database takeover tool

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

steghide-brute-force-tool

Execute a brute force attack with Steghide to file with hide information and password established

stegosaurus

A steganography tool for embedding payloads within Python bytecode.

upload-labs

一个想帮你总结所有类型的上传漏洞的靶场

usbkbcracker

CTF中常见键盘流量解密脚本

usbkeyboarddatahacker

USB键盘流量包取证工具 , 用于恢复用户的击键信息

usbmicedatahacker

USB鼠标流量包取证工具 , 主要用于绘制鼠标移动以及拖动轨迹

volatility

An advanced memory forensics framework

volatility3

Volatility 3.0 development

vulfocus

🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

webshell

This is a webshell open source project

xss-labs

xss 跨站漏洞平台

xsstrike

Most advanced XSS scanner.

xssvalidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.