977812671

player.js

Interact with and control an embedded Vimeo Player.

clickjackingpoc

A Proof of Concept for Clickjacking Attacks

lazyCSRF

A more useful CSRF PoC generator on Burp Suite

Research-Data

CrossSiteContentHijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

paynode

Mega library that includes various loadable modules for interacting with different payment gateways

paypal-woocommerce

PayPal payment gateway extension for WooCommerce.

WechatExporter

Wechat Chat History Exporter 微信聊天记录导出备份程序

WeChatMsg

提取微信聊天记录，将其导出成HTML、Word、Excel文档永久保存，对聊天记录进行分析生成年度聊天报告，用聊天数据训练专属于个人的AI聊天助手

PyWxDump

获取微信账号信息(昵称/账号/手机/邮箱/数据库密钥/wxid)；PC微信数据库读取、解密脚本；聊天记录查看工具；聊天记录导出为html(包含语音图片)。支持多账户信息获取，支持所有微信版本。

CVE-2024-4367-PoC

CVE-2024-4367 & CVE-2024-34342 Proof of Concept

Web-Fuzzing-Box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

disu

包含crt.sh、fullhunt、fofa、360quake、fofa、hunter、virustotal、zoomeye、rapiddns、certspotter、chaziyu、dnsscan、threatminer的一款收集子域名的集成工具。

rapiddns

Rapidly enumerate subdomains and domains using rapiddns.io.

JWT_Clack

JWT签名爆破

CrackJWTKey

JWT秘钥爆破脚本

JWT_GUI

基于pyqt5和pyjwt实现的jwt加解密爆破一体化工具(ps:其实是水的python课设)

HaE

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

TsojanScan

An integrated BurpSuite vulnerability detection plug-in.

JsRouteScan

Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件

Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

CaA

CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.

Hacking-Group-0872-Slide

Here is Hacking-Group-0872-Slide

EZ

EZ是一款集信息收集、端口扫描、服务暴破、URL爬虫、指纹识别、被动扫描为一体的跨平台漏洞扫描器。

http-request-smuggler

PentestGPT

A GPT-empowered penetration testing tool

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

Jie

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

gatherBurp

一款burp插件,请看简介

XSS-Bypass-Filters