he1l0e Goto Github PK

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

luyten

An Open Source Java Decompiler Gui for Procyon

mind-map

各种安全相关思维导图整理收集

mytools

packet_analysis

IP/TCP/UDP数据包分析及解析

passmaker

可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

pentester_fully-automatic-scanner

定向全自动化渗透测试

php_bugs

PHP代码审计分段讲解

pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

quasarrat

Remote Administration Tool for Windows

safe_tool

safe_tools

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

ssmspwd

SQL Server Management Studio(SSMS) saved password dumper

svn-extractor

simple script to extract all web resources by means of .SVN folder exposed over network.

termite

Source: http://rootkiter.com/Termite/

testssl.sh

Testing TLS/SSL encryption anywhere on any port

tools

一些实用的python脚本

vulnerability-paper

收集的文章

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

wydomain

to discover subdomains of your target domain

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.优化了一些东西。