Decrypts and logs a process's SSL traffic.

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

Simple Android/iOS protocol analysis and utilization tool

an extension to Burp Suite that allows for real-time target sharing

An online proxy based on ServiceWorker

Directory/File, DNS and VHost busting tool written in Go

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

Quickly Search Large DNS Datasets

Quickly Search Large DNS Datasets

subdomain-scanner is a subdomain discovery tool that discovers valid subdomains for websites.

为键盘工作者设计的单词记忆与英语肌肉记忆锻炼软件

PowerShell script and Java code to decrypt WebLogic passwords

chrome extension can edit, interrupt, view http headers between chrome and Internet

Sample extention modify http headers. You can add custom headers.

A powerful and useful hacker dictionary builder for a brute-force attack

Default usernames and passwords for various systems (VoIP,IPMI,Oracle).

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。

⚓ Parse geoinfo of IP Address without leaving your terminal

A IP Lookup

A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）

输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等

上传漏洞fuzz字典生成脚本

将域名转为ip段权重

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

burp插件开发指南

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

A Burp Suite Extender that search sub domain and similar domain from sitemap