standj7 Goto Github PK

autorepeater

Automated HTTP Request Repeating With Burp Suite

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

cobaltstrike

CobaltStrike's source code

decoder-improved

Improved decoder for Burp Suite

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

gobuster

Directory/File, DNS and VHost busting tool written in Go

ksubdomain

无状态子域名爆破工具

loggerplusplus

Advanced Burp Suite Logging Extension

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-notes

📖《内网安全攻防-渗透测试实战指南》

php-audit-labs

一个关于PHP的代码审计项目

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

rad

redteamer

红方人员作战执行手册

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

singularity

A DNS rebinding attack framework.

sqlmap

Automatic SQL injection and database takeover tool

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w13scan

Passive Security Scanner (被动式安全扫描器)

webshell

This is a webshell open source project

wstalker

WStalker: an easy proxy

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档