siegelcpp Goto Github PK

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

apkanalyser

一键提取安卓应用中可能存在的敏感信息。

autoxssviasubd

Find auto xss in web page with Subdomains and all input fields

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

awvsbatchimport

AWVS12&AWVS13 通用API批量导入脚本

bug-bounty-toolz

BBT - Bug Bounty Tools

burpextenderutilities

A collection of utilities to simplify the creation of Burp Suite plugins

burpjsencrypter

More Easier Burp Extension To Solve Javascript Front End Encryption,一款更易使用的解决前端加密问题的Burp插件。

buy_pig_plan

电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护，佛系更新

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

deepsea

DeepSea Phishing Gear

exploitpack

Exploit Pack - Project

extension-boilerplate

⚡️ A template for building cross browser extensions for Chrome, Opera & Firefox.

eyeballer

Convolutional neural network for analyzing pentest screenshots

fuxploider

File upload vulnerability scanner and exploitation tool.

generator-burp-extension

Everything you need about Burp Extension Generation

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gophish

Open-Source Phishing Toolkit

hacking-with-go

Golang for Security Professionals

horn3t

Powerful Visual Subdomain Enumeration at the Click of a Mouse

hunt

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

jetbrains-agent-latest

Intellij IDEA License Activation

jid

json incremental digger

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

leakscraper

LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. Theses tools are designed to help penetration testers and redteamers doing OSINT by gathering credentials belonging to their target.

mastering-machine-learning-for-penetration-testing

Mastering Machine Learning for Penetration Testing, published by Packt

metadata-attacker

A tool to generate media files with malicious metadata