Lists (4)
Sort Name ascending (A-Z)
Stars
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Hunt down social media accounts by username across social networks
🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
Automatic SQL injection and database takeover tool
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
An open-source PAM tool alternative to CyberArk. 广受欢迎的开源堡垒机。
提供多款 Shadowrocket 规则,带广告过滤功能。用于 iOS 未越狱设备选择性地自动翻墙。
Universal Command Line Interface for Amazon Web Services
Impacket is a collection of Python classes for working with network protocols.
Faster Whisper transcription with CTranslate2
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
一个攻防知识仓库 Red Teaming and Offensive Security
Tool for Active Directory Certificate Services enumeration and abuse
CTF chall write-ups, files, scripts etc (trying to be more organised LOL)
针对SpringBoot的开源渗透框架,以及Spring相关高危漏洞利用工具
linuxprivchecker.py -- a Linux Privilege Escalation Check Script
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台,无需编写代码的安全自动化,使用 SOAR 可以让团队工作更加高效
A command-line client for SQL Server with auto-completion and syntax highlighting
OSINT Tool: Generate username lists for companies on LinkedIn
Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components throug…
A simple and unlimited twitter scraper : scrape tweets, likes, retweets, following, followers, user info, images...
An HTTP proxy server to automatically authenticate through an NTLM proxy