Beast code in Giters

Nazicc's starred repositories

evil-winrm

The ultimate WinRM shell for hacking/pentesting

Language:RubyLGPL-3.04247 770

sensitive-word

👮‍♂️The sensitive word tool for java.(敏感词/违禁词/违法词/脏词。基于 DFA 算法实现的高性能 java 敏感词过滤工具框架。请勿发布涉及政治、广告、营销、翻墙、违反国家法律法规等内容。高性能敏感词检测过滤组件，附带繁体简体互换，支持全角半角互换，汉字转拼音，模糊搜索等功能。)

Language:JavaApache-2.03627 27 55

clash-rev

Continuation of Clash core project

GPL-3.01977 25 12

python-whydo

Explore Python's charms by asking WHY questions

1867 35 16

Heimdallr

一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗

Language:JavaScriptGPL-2.01303 12 12

joy

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Language:CNOASSERTION1283 113 86

CORScanner

🎯 Fast CORS misconfiguration vulnerabilities scanner

Language:PythonMIT987 21 17

Glass

Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。

Language:Python947 15 29

TscanPlus

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

903 14 58

security-paper

（与本人兴趣强相关的）各种安全or计算机资料收集

Language:PythonMIT704 260

TerraformGoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

Language:HCLApache-2.0505 8 8

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers.(expectations)

Language:GoAGPL-3.0501 11 27

FastJsonParty

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

Language:Python477 5 2

5ghoul-5g-nr-attacks

Language:C++GPL-2.0441 14 23

SiteScan

专注一站化解决渗透测试的信息收集任务，功能包括域名ip历史解析、nmap常见端口爆破、子域名信息收集、旁站信息收集、whois信息收集、网站架构分析、cms解析、备案信息收集、CDN信息解析、是否存在waf检测、后台寻找以及生成检测结果html报告表。

Language:PythonBSD-3-Clause379 5 9

AWD-Guide

从零学习AWD比赛指导手册以及AWD脚本整理

Language:PythonGPL-3.0319 3 1

PHP_INCLUDE_TO_SHELL_CHAR_DICT

Language:PHPApache-2.0306 1 2

40k-nuclei-templates

40,000+ Nuclei templates for security scanning and detection across diverse web applications and services

242 5 1

ActiveMqRCE

用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用内存马注入

Language:Java230 2 1

SqliSniper

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

Language:PythonMIT211 3 1

EmailSender

钓鱼邮件便捷发送工具（GUI）

Language:HTML193 2 3

Frchannel

帆软bi反序列化漏洞利用工具

Language:Java141 3 2

PacketSpy

Language:PythonMIT120 40

Android-Pentesting-Checklist

Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skills with essential tools and user-friendly guides. Elevate Android security seamlessly!

102 60

Nazicc