Lists (30)
Sort Name ascending (A-Z)
apk后门
Brute Force
BT下载
POC、EXP
scan
Spring Boot 相关漏洞学习资料,利用方法和技巧合集
VM
WIFI爆破
wireguard、openvpn、sockes
主机漏扫,审计
云手机搭建
云服务器
会收集整理 GitHub有趣的项目
佩奇文库
内存马查杀
内网穿透
后渗透
容器扫描
工具包
应急响应
开源远程软件
微信历史版本下载
指纹
提权
检测js
社交分析软件
移动app代码审计
钓鱼
靶场
靶场一键
Language
Sort by: Recently starred
Starred repositories
Scan for misconfigured S3 buckets across S3-compatible APIs!
A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Termux - a terminal emulator application for Android OS extendible by variety of packages.
A cheat sheet that contains advanced queries for SQL Injection of all types.
Reverse engineering and pentesting for Android applications
⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and s…
Downloads videos and playlists from YouTube
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into account…
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
Scanning APK file for URIs, endpoints & secrets.
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
Incredibly fast crawler designed for OSINT.
Automatic SQL injection and database takeover tool
Information gathering framework for phone numbers
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
A swiss army knife for pentesting networks