yhy0 Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

argo

Argo is an automated general crawler for automatically obtaining website URLs . Argo 是一个自动化通用爬虫 用于自动化获取网站的URL 基于无头浏览器实现了静态和动态结合的方式来实现

arsenal

内网小工具

avbypass

一款Web在线自动免杀工具

awesome-wails

⭐ A carefully selected list of Wails applications

behinderclientsource

冰蝎客户端源码-3.0-BETA11.t00ls

blog_comments

博客评论

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

chying

承影 - 一款安全工具箱,集成了目录扫描、JWT、Swagger 测试、编/解码、轻量级 BurpSuite、杀软辅助功能

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

doge-selfdelete

Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs

driedmango

GUI Exploit Tool For RedTeam

expdemo-javafx

图形化漏洞利用Demo-JavaFX版

expinfovuln

Goby 插件 .idea、 .git、.DS_Store 一键利用

faketoa

TCP IP伪造,建议使用 ubuntu 22.04

flatlaf-demo-1.4

Godzilla 依赖的 flatlaf-demo-1.4.jar mvn 重新构建

gadgets

Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。

github-cve-monitor

实时监控github上新增的cve、自定义关键字、安全工具更新、大佬仓库监控，并多渠道推送通知

go-mitmproxy

mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。

godzillamemoryshellproject

godzillasource

哥斯拉源码-v3.03-godzilla

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

hydra

没什么用，外网扫描出来的概率太小了，得不偿失，先分出来，后续再看看加不加入吧

java-memshell-scanner

通过jsp脚本扫描java web Filter/Servlet型内存马

java-rce-echo

Java RCE 回显测试代码

javaserializedemo

Java反序列化漏洞学习

jie

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

jiepaper

Jie 漏洞扫描器中关于漏洞扫描的设计

katana

A next-generation crawling and spidering framework.