11listen's starred repositories

cs-self-learning

计算机自学指南

Language:HTMLLicense:MITStargazers:49660Issues:309Issues:163

python-mastery

Advanced Python Mastery (course by @dabeaz)

Language:PythonLicense:CC-BY-SA-4.0Stargazers:10331Issues:79Issues:36

mail-server

Secure & Modern All-in-One Mail Server (IMAP, JMAP, SMTP)

Language:RustLicense:AGPL-3.0Stargazers:3041Issues:30Issues:227

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。

Language:PythonLicense:GPL-3.0Stargazers:3013Issues:50Issues:73

proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Language:GoLicense:MITStargazers:2550Issues:52Issues:96

python-whydo

Explore Python's charms by asking WHY questions

suo5

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

Language:JavaLicense:MITStargazers:1808Issues:16Issues:32

nps

在 0.26.10 版本的基础上修改而来的

Language:GoLicense:GPL-3.0Stargazers:1537Issues:22Issues:158

digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

Language:PythonLicense:BSD-3-ClauseStargazers:1336Issues:21Issues:10

Supershell

Supershell C2 远控平台,基于反向SSH隧道获取完全交互式Shell

VcenterKiller

一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webshell,命令执行或者上传公钥使用SSH免密连接

Language:GoLicense:Apache-2.0Stargazers:1244Issues:12Issues:12

OA-EXPTOOL

OA综合利用工具,集合将近20款OA漏洞批量扫描

Language:PythonLicense:AGPL-3.0Stargazers:1195Issues:16Issues:28

Hello-Java-Sec

☕️ Java Security,安全编码和代码审计

superSearchPlus

superSearchPlus是聚合型信息收集插件,支持综合查询,资产测绘查询,信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。

JDumpSpider

HeapDump敏感信息提取工具

Language:JavaLicense:Apache-2.0Stargazers:1092Issues:12Issues:8

SocialEngineeringDictionaryGenerator

社会工程学密码生成器,是一个利用个人信息生成密码的工具

Language:HTMLLicense:MITStargazers:854Issues:11Issues:5

BehinderClientSource

❄️冰蝎客户端源码-V4.0.6🔞

PhishingBook

红蓝对抗:钓鱼演练资源汇总&备忘录

scaninfo

fast scan for redtools

Language:GoLicense:MITStargazers:788Issues:11Issues:8

autoDecoder

Burp插件,根据自定义来达到对数据包的处理(适用于加解密、爆破等),类似mitmproxy,不同点在于经过了burp中转,在自动加解密的基础上,不影响APP、网站加解密正常逻辑等。

spp

A simple and powerful proxy

Language:GoLicense:MITStargazers:739Issues:13Issues:24

BlueTeamTools

蓝队分析研判工具箱,功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

nessus

nessus crack for docker

SecurityProduct

开源安全产品源码,IDS、IPS、WAF、蜜罐等

searchall

强大的敏感信息搜索工具

HVVault

梳理【护网高利用率POC】并集成Nuclei模板仓库,针对解决网上同一资产漏洞一键检测工具参次不齐问题。

Network-security-study-notes

主要记录网络安全学习笔记,包含WEB基础、提权、APP渗透、内网横向移动、工具学习等

shell-backdoor

all shell backdoor in the world

Language:HackStargazers:361Issues:5Issues:0

Web-SurvivalScan

对Web渗透项目资产进行快速存活验证

Language:PythonLicense:MITStargazers:309Issues:3Issues:3