wivd Goto Github PK

struts-pwn

An exploit for Apache Struts CVE-2017-5638

struts-pwn_cve-2018-11776

An exploit for Apache Struts CVE-2018-11776

sts2g

Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sudo_killer

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

superwoordlist

supplier

主流供应商的一些攻击性漏洞汇总

taowu-cobalt-strike

tools

一些实用的python脚本

tools-1

GitHub repository for sysadmin related tools

trackray

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

unix-privesc-check

Automatically exported from code.google.com/p/unix-privesc-check

urlfinder

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

vtest

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

vulhub

Docker-Compose file for vulnerability environment

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

vulnerability-list

在渗透测试中快速检测常见中间件、组件的高危漏洞。

wafninja

WAFNinja is a tool which contains two functions to attack Web Application Firewalls.

wapty

[ceased maintenance] An open source alternative to burp suite written in Go.

web-security-learning

Web-Security-Learning

webpwn3r

WebPwn3r - Web Applications Security Scanner.

websearch

Search engine for web assets

webshell

This is a webshell open source project

webshell-1

WebShell Collect

webshell-2

WebShell is a web-based ssh shell.

webshell-3

WebShell Dump

webshell-4

Webshell && Backdoor Collection

wifi-pumpkin

Framework for Rogue Wi-Fi Access Point Attack