Repositories list

• WebCrawling

  Public
  Web逆向爬虫的学习记录

  JavaScript

  •15•0•0•0•Updated Nov 28, 2024Nov 28, 2024

• MyMSIAnalyzer

  Public
  Analyse MSI files for vulnerabilities

  C#

  •32•0•0•0•Updated Aug 30, 2024Aug 30, 2024

• debugtron

  Public
  Debug in-production Electron based app

  TypeScript

  •

  MIT License

  •122•0•0•0•Updated Jul 11, 2024Jul 11, 2024

• SqlmapXPlus

  Public
  SqlmapXPlus 基于 Sqlmap，对经典的数据库漏洞利用工具进行二开！

  Python

  •

  GNU General Public License v2.0

  •62•0•0•0•Updated Feb 3, 2024Feb 3, 2024

• js-cookie-monitor-debugger-hook

  Public
  js cookie逆向利器：js cookie变动监控可视化工具 & js cookie hook打条件断点

  JavaScript

  •

  MIT License

  •95•0•0•0•Updated Aug 30, 2023Aug 30, 2023

• vueinfo

  Public
  Extract website information from Vue

  JavaScript

  •19•0•0•0•Updated Aug 29, 2023Aug 29, 2023

• surf

  Public
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

  Go

  •45•0•0•0•Updated Jun 17, 2023Jun 17, 2023

• JDumpSpider

  Public
  HeapDump敏感信息提取工具

  Java

  •

  Apache License 2.0

  •136•0•0•0•Updated Apr 6, 2023Apr 6, 2023

• interactsh

  Public
  An OOB interaction gathering server and client library(DNSlog工具)

  Go

  •

  MIT License

  •383•0•0•0•Updated Jan 30, 2023Jan 30, 2023

• dnSpyEx

  Public
  Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

  C#

  •

  GNU General Public License v3.0

  •5.2k•0•0•0•Updated Dec 29, 2022Dec 29, 2022

• remote-method-guesser

  Public
  Java RMI Vulnerability Scanner

  Java

  •

  GNU General Public License v3.0

  •109•0•0•0•Updated Dec 8, 2022Dec 8, 2022

• KeymouseGo

  Public
  类似按键精灵的鼠标键盘录制和自动化操作 模拟点击和键入 | automate mouse clicks and keyboard input

  Python

  •

  GNU General Public License v2.0

  •1.1k•0•0•0•Updated Oct 26, 2022Oct 26, 2022

• sippts

  Public template
  Set of tools to audit SIP based VoIP Systems

  Python

  •

  GNU General Public License v3.0

  •89•0•0•0•Updated Sep 28, 2022Sep 28, 2022

• VirtualApp

  Public
  support android 12 应用分身、模拟设备、模拟wifi、虚拟多开、钉钉打卡、企微打卡、插件开发、XP插件、模拟用户操作、java hook、c++ hook

  Java

  •415•0•0•0•Updated Jul 10, 2022Jul 10, 2022

• DHook

  Public
  DHook是一个交互式自定义动态hook的工具。通过javaagent+ASM技术对运行时的java应用进行字节码修改，并可以以界面和配置文件的方式来增加hook点，修改执行方法的返回值以及参数等。如破解cs等

  Java

  •16•0•0•0•Updated Jun 26, 2022Jun 26, 2022

• ysoserial-1

  Public
  ysoserial for su18

  Java

  •207•0•0•0•Updated Jun 20, 2022Jun 20, 2022

• Cloud-Bucket-Leak-Detection-Tools

  Public
  六大云存储，泄露利用检测工具

  Python

  •140•0•0•0•Updated May 29, 2022May 29, 2022

• hetty

  Public
  An HTTP toolkit(like burp) for security research.

  Go

  •

  MIT License

  •353•0•0•0•Updated May 22, 2022May 22, 2022

• javascript-deobfuscator

  Public
  General purpose JavaScript deobfuscator

  TypeScript

  •

  Apache License 2.0

  •118•0•0•0•Updated May 18, 2022May 18, 2022

• httpx

  Public
  httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

  Go

  •

  MIT License

  •871•0•0•0•Updated May 18, 2022May 18, 2022

• Web-Cache-Vulnerability-Scanner

  Public
  Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

  Go

  •

  Other

  •129•0•0•0•Updated May 10, 2022May 10, 2022

• POC-bomber

  Public
  利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

  Python

  •379•0•0•0•Updated Apr 25, 2022Apr 25, 2022

• nip.io

  Public
  将公网ip解析到内网，适用于ssrf等场景

  Python

  •

  Other

  •158•0•0•0•Updated Apr 24, 2022Apr 24, 2022

• stunner

  Public
  Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

  Go

  •

  Other

  •44•0•0•0•Updated Apr 19, 2022Apr 19, 2022

• SpringBootExploit

  Public
  项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

  Java

  •

  Apache License 2.0

  •313•0•0•0•Updated Apr 17, 2022Apr 17, 2022

• CloudKeyKiller

  Public
  阿里云AK泄露利用工具

  Python

  •14•0•0•0•Updated Apr 16, 2022Apr 16, 2022

• eyes.sh

  Public
  Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

  JavaScript

  •92•0•0•0•Updated Apr 1, 2022Apr 1, 2022

• python-proxy

  Public
  HTTP/HTTP2/HTTP3/Socks4/Socks5/Shadowsocks/ShadowsocksR/SSH/Redirect/Pf TCP/UDP asynchronous tunnel proxy implemented in Python 3 asyncio.

  Python

  •

  MIT License

  •347•0•0•0•Updated Mar 17, 2022Mar 17, 2022

• ddddocr

  Public
  带带弟弟 通用验证码识别OCR pypi版

  Python

  •

  Apache License 2.0

  •1.9k•0•0•0•Updated Mar 1, 2022Mar 1, 2022

• Hyuga

  Public
  (DNSLOG)Hyuga 是一个用来检测带外(Out-of-Band)流量的监控工具。

  Go

  •

  GNU General Public License v3.0

  •60•0•0•0•Updated Feb 28, 2022Feb 28, 2022