zhengxyzw Goto Github PK

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

angelsword

Python3编写的CMS漏洞检测框架

arm_now

Multi arch vm working out of the box for everyone

awesomexss

Awesome XSS stuff

b4tm4n

B4TM4N ~ PHP WEBSHELL

behinder

“冰蝎”动态二进制加密网站管理客户端

blackdex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

bleah

A BLE scanner for "smart" devices hacking.

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

brook

Brook is a cross-platform(Linux/MacOS/Windows/Android/iOS) proxy software

cknife

Cknife

dexdump

快速脱一代壳的xposed插件

dexextractor

android dex extractor ，anti-shell，android 脱壳

dnspop

Analysis of DNS records to find popular trends

droidsslunpinning

Android certificate pinning disable tools

easyreport

A simple and easy to use Web Report System for java.EasyReport是一个简单易用的Web报表工具(支持Hadoop,HBase及各种关系型数据库),它的主要功能是把SQL语句查询出的行列结构转换成HTML表格(Table)，并支持表格的跨行(RowSpan)与跨列(ColSpan)。同时它还支持报表Excel导出、图表显示及固定表头与左边列的功能。

email_hack

A email bomb/fake email tool written by Python.

frida-apk-unpack

frida-scripts

一些frida脚本

frida-unpack

基于Frida的脱壳工具

githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露）

httpcanary

A powerful capture and injection tool for the Android platform

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

ivideo

一个可以观看国内主流视频平台所有视频的客户端（Mac、Windows、Linux），包括 VIP 资源

jenkins-preauth-rce-poc

Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

logger-plus-plus

Burp Suite Logger++: Log activities of all the tools in Burp Suite