r0ckysec Goto Github PK

assetfinder

Find domains and subdomains related to a given domain

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

behinder

“冰蝎”动态二进制加密网站管理客户端

behinder_source

Behinder3.0 Beta4 源码（Decompile and Fixed）

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

cms-hunter

CMS漏洞测试用例集合

cnblogs-theme-simplememory

个人博客

crossc2-c2profile

CrossC2通信协议API实现

cve-2019-0193

Apache Solr DataImport Handler RCE

cve-2021-26121

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

go

The Go programming language

go-security

GO安全开发自用封装库

ja-netfilter

A javaagent framework

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

langsrccurise

SRC子域名资产监控

metasploit-framework

Metasploit Framework

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pocframe

pocframe是一个基于python3的开源批量POC检测框架，默认使用协程异步请求，支持多线程并发，支持多种指定目标方式，可用于批量POC检测，也可根据需要扩展功能。

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

r0ckysec

r0ckysec.github.io

一个游走在安全界的菜鸡

saucerframe

python3批量poc检测工具

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiroexploit-deprecated

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

sqlmap

Automatic SQL injection and database takeover tool

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)