A tool to check a bunch of URLs that contain reflecting params.

wordpress batch brute force

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

冰蝎Java WebShell自动化免杀生成

获取Exchange信息的小工具

通达OA 任意用户登录漏洞

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

Find web directories without bruteforce

泛微OA_V9全版本的SQL远程代码执行漏洞

Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

a drop-in replacement for Nmap powered by shodan.io

Office 365 and Exchange Enumeration

appfinger(和风)是一款Http指纹管理工具~~~

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

Fast IP to CIDR lookup in Golang

tool that generates bypasses for open redirects

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

HTTP Proxy Relay is a tool to create an HTTP proxy that connects to and relays all requests through a SOCKS proxy.

Dirfuzz by golang

sensitive information protection toolkit

🚀 gnet is a high-performance, lightweight, non-blocking, event-driven networking framework written in pure Go.

🐜🐜🐜 ants is the most powerful and reliable pooling solution for Go.

SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.

Concurrency limiting goroutine pool

A Go blocking leaky-bucket rate limit implementation

pkgs🔧

POC for VMWARE CVE-2022-22954

带带弟弟 通用验证码识别OCR pypi版

在网传的哥斯拉&冰蝎源码基础上加了一点注释