se7venom Goto Github PK

acunetix12-scan-agent

awvs批量扫描

ashxlessspy

ashx China Chopper WebShell

awvs12-scan-agent

a AWVS12 api tool

blasting_dictionary

爆破字典

bulk-scanning-of-subdomain-takeover-vulnerabilities

子域名接管漏洞批量扫描

bypass360mimikatz_x64

bypass_disablefunc_via_ld_preload

解决php提权的时候因系统禁用函数导致无法执行命令的情况

bypasscaidao

过WAF菜刀

ciscoexploit

Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

collectionofexp

一些漏洞利用工具的收集

cve-2017-7269

fixed msf module for cve-2017-7269

cve-2019-0708

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

cve-2019-16278

CVE-2019-16278Nostromo httpd命令执行

cve-2019-16279

（CVE-2019-16279）dos

cve-2019-8451

cwebscanner

快速扫描C段web应用，获取请求状态code、server、title信息

dbscanner

未授权访问+弱口令批量检测

digger

从百度爬取子域名

discoverbrodomain

前渗透信息探测工具集-旁站关联域名采集

discovertarget

前渗透信息探测工具集-URL采集

discuz-ml-rce

影响系统及版本：Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

exp

收集各种各样的exp

exploitdb

The official Exploit Database repository

fofa-cscan

a Simple tool.Based on fofa.so

fuzzscanner

一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。

hack

渗透测试资源库

idea_exploit

Gather sensitive information from (.idea) folder for pentesters

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.