sec-fork Goto Github PK

wordlists

Real-world infosec wordlists, updated regularly

workflowservicexml-exploit

wps-rce

WPS Office RCE On 2023-08-10

wscan

一款开源的安全评估工具，支持常见 web 安全问题扫描和自定义 poc

wsmemshell

一种全新的内存马

wspcoerce

PoC to coerce authentication from Windows hosts using MS-WSP

wwaf

Wwaf is a small tool for identifying Web application firewall (WAF) products.

wxapkg

微信小程序 .wxapkg 文件扫描 + 解密 + 解包工具

wxappunpacker

基于node反编译小程序 已经配置完成

wyzxxz-heapdump_tool

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

x-autoxray

AutoScan 有多个目标时，调用xray+rad进行自动扫描

x-crack

x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB

x64dbg-plugin-manager

Plugin manager for x64dbg

xc

A small reverse shell for Linux & Windows

xdecrypt

Xshell Xftp password decrypt

xenos

Windows dll injector

xia_sql

xia SQL (瞎注) burp 插件 ，在每个参数后面填加一个单引号，两个单引号，一个简单的判断注入小插件。

xorpass

Encoder to bypass WAF filters using XOR operations.

xray_cracked

Update Xray1.9.8 Cracked for Windows,Linux and Mac OS.

xray_free_crack

xray_free_crack,通用xray白嫖高级版.

xscan

一款取决于用户策略的资产管理平台

xspear

Powerfull XSS Scanning and Parameter analysis tool&gem

xsscrapy

XSS spider - 66/66 wavsep XSS detected

xssfinder

XSS discovery tool

xssmap

Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities

xtools

Xtools 是一款 Sublime Text 插件，同时是一款简单的资产处理、命令行调用工具。

xueqiu

xueqiu captcha

yaml-payload

A tiny project for generating SnakeYAML deserialization payloads

yapi-exploit

YApi boolean-based injection exploit.

yapi-rce-webshell

Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小