kevien Goto Github PK

template-injection-workshop

Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

tencent_exmail

获取腾讯企业邮箱通讯录

theharvester

E-mail, subdomain and people names harvester

tinyawdplatform

基于docker运行在单机上的awd平台，仅适用于小规模的队内练习使用

torshammer

Tor's hammer. Slow post DDOS tool written in python.

traitor

:arrow_up: :skull_and_crossbones: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

travistest

tsh

Tiny SHell is an open-source UNIX backdoor.

unihook

Intercept arbitrary functions at run-time, without knowing their typedefs

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

v2raydocker

一键v2ray ws + tls 方便就完事了

vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

vulawdhub

该项目是利用docker技术创建的有漏洞的cms环境集合，可以进行练习

vulhub

Docker-Compose files for vulnerability environments

vuls

Vulnerability scanner for Linux, agentless, written in golang.

w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

webpathscanner

websec101

A set of vulnerable code for the security course in NTUST. (PHP only currently)

web_develop

《Python Web开发实战》书中源码

wechatdecrypt

微信消息解密工具

weixin-java-mp-demo

基于Spring Boot 和 WxJava 实现的微信公众号Java后端Demo，支持多公众号

wfuzz

Web application bruteforcer

wincmdfu

Windows one line commands that make life easier, shortcuts and command line fu.

wmi_backdoor

A PoC WMI backdoor presented at Black Hat 2015

xss-filter

XSS (Cross-Site Script) Filter for Node.js & the browser, provides friendly, reliable XSS filter API for you.

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

xssor2

XSS'OR - Hack with JavaScript.

xssproxy

Cross the intranet via XSS.

yara

The pattern matching swiss knife