sefanll Goto Github PK

python-100-days

Python - 100天从新手到大师

qark

Tool to look for several security related Android application vulnerabilities

recaptcha

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

red_team_tool_countermeasures

scalpel

scalpel是一款命令行扫描器，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。 原理：https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog

sec-jobs

信息安全实习和校招的面经、真题和资料 减少安全选手找实习/工作的痛苦

secscan-authcheck

越权检测工具

sensitivefilescan

smbghost

Scanner for CVE-2020-0796 - SMBv3 RCE

smbghost-1

Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE

software-vulnerability-scanner

Vulnerability scanner based on vulners.com search API

sqlmap

Automatic SQL injection and database takeover tool

ssh_scan

A prototype SSH configuration and policy scanner (Blog: https://mozilla.github.io/ssh_scan/)

standardizedimageprocessingtest

A test suite built with Mocha/Chai to test for behavioral differences between image libraries for the web

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

subdomainsbrute

A fast sub domain brute tool for pentesters

testssl.sh

Testing TLS/SSL encryption anywhere on any port

tornado

Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

unauthorized-check

扫描常见未授权访问（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w11scan

分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform

w13scan

Passive Security Scanner (被动式安全扫描器)

wappalyzer

Identify technology on websites.

wdscanner

WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。

weakfilescan

动态多线程敏感信息泄露检测工具

webeye

whatweb

Next generation web scanner

windowsvulnscan

wooyun-payload

从wooyun中提取的payload，以及burp插件