0n10n

sqlmap

Automatic SQL injection and database takeover tool

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

Mobile-Detect

Mobile_Detect is a lightweight PHP class for detecting mobile devices (including tablets). It uses the User-Agent string combined with specific HTTP headers to detect the mobile environment.

kompose

Convert Compose to Kubernetes

WSL2-Linux-Kernel

The source for the Linux kernel used in Windows Subsystem for Linux 2 (WSL2)

examples

Kubernetes application example tutorials

AnyText

Official implementation code of the paper <AnyText: Multilingual Visual Text Generation And Editing>

action-gh-release

📦 :octocat: GitHub Action for creating GitHub Releases

bypass-firewalls-by-DNS-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

param-miner

wapiti

Web vulnerability scanner written in Python3

sqlmap4burp-plus-plus

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

Heroinn

A cross platform C2/post-exploitation framework.

LearnJavaMemshellFromZero

【三万字原创】完全零基础从0到1掌握Java内存马，公众号：追梦信安

Komo

🚀Komo, a comprehensive asset collection and vulnerability scanning tool. Komo 一个综合资产收集和漏洞扫描工具，集成了20余款工具，通过多种方式对子域进行获取，收集域名邮箱，进行存活探测，域名指纹识别，域名反查ip，ip端口扫描，web服务链接爬取并发送给xray，对web服务进行POC漏洞扫描，对主机进行主机漏洞扫描。

spider_reverse

爬虫逆向案例，已完成：TLS指纹｜瑞数｜震坤行 | 网易易盾 | 微信小程序反编译逆向(百达星系) | 同花顺 | rpc解密 | 加速乐 | 极验滑块验证码 | 巨量算数 | Boss直聘 | 企查查 | **五矿 | qq音乐 | 产业政策大数据平台 | 企知道 | 雪球网(acw_sc__v2) | 1688 | 七麦数据 | whggzy | 企名科技 | mohurd | 艺恩数据 | 欧科云链

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

SeaMoon

月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具

Struts2VulsScanTools

1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2-037、DevMode、S2-045/046、S2-052、S2-048、S2-053、S2-057、S2-061、S2相关log4j2十余种漏洞。 2、“批量验证”，（为防止批量geshell，此功能已经删除，并不再开发）。 3、S2-020、S2-021仅提供漏洞扫描功能，因漏洞利用exp很大几率造成网站访问异常，本程序暂不提供。 4、对于需要登录的页面，请勾选“设置全局Cookie值”，并填好相应的Cookie，程序每次发包都会带上Cookie。 5、作者对不同的struts2漏洞测试语句做了大量修改，执行

Burpy

A plugin that allows you execute python and get return to BurpSuite.

yuze

A socksv5 proxy tool Written by CLang. 一款纯C实现的基于socks5协议的轻量内网穿透工具，支持ew的全部数据转发方式，支持跨平台使用

AVEvasionCraftOnline

An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.

myscan

构建信息搜集/漏洞扫描

argc-completions

{bash,zsh,fish,powershell,nushell}-completions for 1000+ commands.

Container-Vulnerability-Exploit

容器安全漏洞的分析与复现

gopher-redis-auth

This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。

python-beginners

For students who are learning Python3, with only intermediate JavaScript skills at the start

html_css_templates

Simple templates for small projects

just_enough_code

Visual Communication Skills for the Journalism and Mass Communication Classroom - AEJMC 2016 - workshop

lightsocks

support socks4, socks4a, socks5, socks5h, http proxy all in one