BA7JCM's repositories
DELTA
PROJECT DELTA: SDN SECURITY EVALUATION FRAMEWORK
w8fuckcdn
Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址
Blisqy
Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
Jenkins
Jenkins漏洞探测、用户抓取爆破
CVE-2016-2107
Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)
data_hacking
Data Hacking Project
pythem
pentest framework
rop-tool
A tool to help you write binary exploits
WeChatLuckyMoney
:money_with_wings: WeChat's lucky money helper (微信抢红包插件) by Zhongyi Tong. An Android app that helps you snatch red packets in WeChat groups.
CyberScan
CyberScan: Network's Forensics ToolKit
gwhatweb
CMS识别 python gevent实现
icsmaster
ICS/SCADA Security Resource（整合工控安全相关资源）
djangohunter
Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.
paskto
Paskto - Passive Web Scanner
DNFWAH
It's an ezine: DO NOT FUCK WITH A HACKER
phptrace
A tracing and troubleshooting tool for PHP scripts.
cangibrina
A fast and powerfull dashboard (admin) finder
gcat
A PoC backdoor that uses Gmail as a C&C server
findWebshell
findWebshell是一款基于python开发的webshell检测工具。
stegdetect
UNMAINTAINED. USE AT OWN RISK. Stegdetect is an automated tool for detecting steganographic content in images.
PowerShell
Useful PowerShell scripts
autoFindXssAndCsrf
自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
CMSsc4n
Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop
write-ups-2016
Wiki-like CTF write-ups repository, maintained by the community. 2016
crack_ssh
go写的协程版的ssh\redis\mongodb弱口令破解工具
dzscan
Dzscan
MITMf
Framework for Man-In-The-Middle attacks
hardseed
SEX IS ZERO (0), so, who wanna be the ONE (1), aha?
Mind-Map
各种安全相关思维导图整理收集