leasonj Goto Github PK

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

aes-killer

Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly

ansible

Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy. Avoid writing scripts or custom code to deploy and update your applications — automate in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com/ansible/

apidetector

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

arjun

HTTP parameter discovery suite.

attackwebframeworktools-5.0

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.

attck-tools-library

TimelineSec ATT&CK 工具库

autodecoder

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

awd-platform

platform for awd

beef

The Browser Exploitation Framework Project

behinder

“冰蝎”动态二进制加密网站管理客户端

blue-team

一些个人学习的蓝队以及取证笔记

botgate_bypass

绕过瑞数waf的动态验证机制，实现请求包重放，可针对不同网站使用。

burpy

A plugin that allows you execute python and get return to BurpSuite.

c-jwt-cracker

JWT brute force cracker written in C

campus-imaotai

i茅台app自动预约，每日自动预约，支持docker一键部署（本项目不提供成品，使用的是已淘汰的算法）

captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

captcha_trainer

[验证码识别-训练] This project is based on CNN/ResNet/DenseNet+GRU/LSTM+CTC/CrossEntropy to realize verification code identification. This project is only for training the model.

cnn_captcha

use cnn recognize captcha by tensorflow. 本项目针对字符型图片验证码，使用tensorflow实现卷积神经网络，进行验证码识别。

cobalt_strike_wiki

Cobalt Strike系列

dahualoginbypass

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

ddddocr

带带弟弟 通用验证码识别OCR pypi版

dirsearch

Web path scanner

dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

earthworm

EarthWorm

ehole

EHole(棱洞)2.0 重构版-红队重点攻击系统指纹探测工具

exp-tools

一款集成各种exp的实用性工具

expdp-bakup-database

利用数据泵备份数据库脚本

exploits