gvsall1

xmlrpc-scan

golang tool to scan domains or single domains with know security issues against xmlrpc

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Astra

Astra is a tool to find URLs and secrets inside a webpage/files

CVE-Exploits

PoC exploits for software vulnerabilities

xmap

XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

ApplicationScanner

An open source application scanning tool

EHole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

BBScan

A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

CoreMailUploadRce

Coremail任意文件上传漏洞POC

PublicMonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

WebAliveScan

对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描

colly

Elegant Scraper and Crawler Framework for Golang

jaeles

The Swiss Army knife for automated Web Application Testing

m_troops

零零碎碎的工具

api

Garfield

An offensive attack framework for Distributed Layer of Modern Applications

utf16encodetamper

Just a SQLMap tamper. Tries to bypass WAF protections by encoding SQLMap payloads as utf16.

WAF-Bypasser--WAFNinja

sqlmap_tamper

bypass waf

wafpass

Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.

xwaf

Automatic bypass (brute force) waf

bypasswaf

关于安全狗和云锁的自动化绕过脚本

CVE-2000-0649

Test for CVE-2000-0649, and return an IP address if vulnerable

minicrawler

Multiplexing web client supporting HTTP/2 and WHATWG URL compliant parser written in C

SimpleHTTPClient

Basic Linux HTTP client which can send and receive HTTP messages

monsoon

Fast HTTP enumerator

neatsrc

Just for me, not for you.

GoGhost

High Performance, lightweight, portable Open Source tool for mass SMBGhost Scan