crazykid95 Goto Github PK

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

psdecode

PowerShell script for deobfuscating encoded PowerShell scripts

re-ios-apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

rthvm

Resolvn Threat Hunting Virtual Machine

scavenger

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.

seeker

Accurately Locate Smartphones using Social Engineering

shr3dkit

Red Team Tool Kit

spring-boot-java-highlevel-rest-client-elasticsearch

CRUD operation to AWS Elasticsearch Service using Spring Boot And Java High Level Rest Client

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

ssrftest

SSRF testing tool

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

superwordlist

基于实战沉淀下的各种弱口令字典

theia

Theia is a cloud & desktop IDE framework implemented in TypeScript.

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

timesketch

Collaborative forensic timeline analysis

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

undecimus

unc0ver jailbreak for iOS 11.0 - 12.1.2

vectr

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

vulristics

Extensible framework for analyzing publicly available information about vulnerabilities

web-ctf-cheatsheet

Web CTF CheatSheet 🐈

wfuzz

Web application fuzzer

wstg

The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

zerologon-fullchain