Steven1ay

followers

following

stars

Jay's starred repositories

RouteVulScan

Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件

Language:Java113100

Yasso

强大的内网渗透辅助工具集-让Yasso像风一样支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

Language:Go156500

shell-analyzer

已集成到 jar-analyzer 中 https://github.com/jar-analyzer/jar-analyzer

Language:JavaMIT43400

burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

Language:JavaApache-2.0198000

MULTIPLEXING_PORT

在极端限制出网情况下，可以使用端口复用的技术

Language:Go2100

gopeed

A modern download manager that supports all platforms. Built with Golang and Flutter.

Language:DartGPL-3.01636700

go_proxy_pool

无环境依赖开箱即用的代理IP池

Language:Go75200

simplewall

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.

Language:CGPL-3.0621900

ENScan_GO

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

Language:GoApache-2.0302500

RedTeamNotes

红队笔记

BurpSuiteCertifiedPractitioner

Ultimate Burp Suite Exam and PortSwigger Labs Guide.

javafx_tools

java图形化漏洞利用工具集

Taichi

自定义poc或者exp的python扫描器

Language:Python1200

Antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

Language:JavaScriptApache-2.072400

wscan

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

Language:GoNOASSERTION52300

RedGuard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

Language:GoGPL-2.0138100

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Language:PythonBSD-3-Clause435300

Cobalt_Strike_wiki

Cobalt Strike系列

OA-EXPTOOL

OA综合利用工具，集合将近20款OA漏洞批量扫描

Language:PythonAGPL-3.0125700

rule_for_quantumultX

自用Surge等代理app规则与配置，自用js脚本，爬虫每周自动更新规则

Language:JavaScript183500

HackTools

The all-in-one browser extension for offensive security professionals 🛠

Language:TypeScript579600

NativePayloads

All my Source Codes (Repos) for Red-Teaming & Pentesting + Blue Teaming

Language:C#22300

Supp-truder

Supertruder but better

Language:PythonMIT3300

TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

Language:CGPL-3.0177100

MoveKit

Cobalt Strike kit for Lateral Movement

Language:C#GPL-3.064400

PentestDB

各种数据库的利用姿势

vulcat

vulcat可用于扫描Web端常见的CVE、CNVD等编号的漏洞，发现漏洞时会返回Payload信息。部分漏洞还支持命令行交互模式，可以持续利用漏洞

Language:PythonGPL-3.012200

shiro_killer

批量ShiroKey检测爆破工具

Language:Go30700

superSearchPlus

superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集敏感信息提取 js资源扫描目录扫描 vue组件扫描整合了目前常见的资产测绘平台专为白帽子提供快速侦测目标。

Language:HTML132400

arsenalTools

桌面版本-superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 js敏感信息提取注释资源扫描目录扫描整合了目前常见的资产测绘平台同时支持数据导出