harris2015 Goto Github PK

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

awvs13_batch_py3

针对 AWVS扫描器开发的批量扫描脚本，支持联动xray、burp、w13scan等被动批量

blasting-dictionary

网站后台、文件包含、WebShell等爆破字典！

bluegate

PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE

breach-parse

A tool for parsing breached passwords

bug-bounty-roadmaps

Bug Bounty Roadmaps

bug-bounty-toolz

BBT - Bug Bounty Tools

bug-bounty-wordlists

bugbounty-wordlist

Real world bug bounty wordlists

bugbountytemplates

List of reporting templates I have used since I started doing BBH.

burpextend

基于Burp插件开发打造渗透测试自动化

cnn-sql

ctfd

CTFs as you need them

cve-2018-9995_dvr_credentials

(CVE-2018-9995) Get DVR Credentials

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dirdar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

domainnamepredictor

一个简单的现代化公司域名使用规律预测及生成工具

domxsshilight

Burp Extension in Python hilighting DOM Sinks and Hosts using DOM XSS Wiki regex

dsxs

Damn Small XSS Scanner

frog-auth

🐸Unauthorized Detection Framework未授权访问检测框架

frog-checkcdn

批量检查目标是否为cdn

frog-fp

🐸fingerprint detect framework 批量深度指纹识别框架

frog-submon

🐸Subdomain Monitor, 子域名监控

fscan-add-fingerprint

getinfo

关于信息收集的一些记录

gitlabver

gitlab version index

goon

goon，是一款基于golang开发的扫描及爆破工具功能如下：扫描模式支持ip探活(ipscan)、端口扫描(portscan)、web扫描(webscan -web y)、title扫描(titlescan)、dirscan、备份文件扫描(backscan)、插件扫描(pluginscan)、自定义扫描(autoscan)。爆破模式支持ftp爆破、mssq爆破、mysql爆破、postgres爆破、redis爆破、ssh爆破。

hack

Se37-山屿开发的python黑客工具库