Guangnian's repositories
aquatone
A Tool for Domain Flyovers
Arjun
HTTP parameter discovery suite.
BBScan
A fast vulnerability scanner
Berserker
A list of useful payloads for Web Application Security and Pentest/CTF
domain_hunter
A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件
DongTai
“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。
fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
jekyll-TeXt-theme
💎 🐳 A super customizable Jekyll theme for personal site, team site, blog, project, documentation, etc.
JNDIExploit
A malicious LDAP server for JNDI injection attacks
jvm-rasp
基于JVM-Sandbox实现RASP安全监控防护
memShell
FilterBased/ServletBased in memory shell for Tomcat and some other middlewares
Middleware-Vulnerability-detection
CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15
QcloverBook.github.io
A minimal jekyll theme for building books and blog.
shiro_rce
shiro rce 反序列 命令执行 一键工具
sqlmap_chunked_proxy
sqlmap分块传输代理
SSRFmap
Automatic SSRF fuzzer and exploitation tool
theHarvester
E-mails, subdomains and names Harvester - OSINT
vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
WebAliveScan
根据端口快速扫描存活的WEB
XSS-Fishing2-CS
鱼儿在cs上线后自动收杆|Automatically stop fishing in javascript after the fish is hooked