Floyd's repositories
ARL
ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
Awesome-POC
一个漏洞POC知识库 目前数量 1000+
captcha-killer-modified
captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite
CloudflareBypassForScraping
A cloudflare verification bypass script for webscraping
command-injection-payload-list
🎯 Command Injection Payload List
csv-injection-payloads
🎯 CSV Injection Payloads
CVE-2024-21683-RCE
CVE-2024-21683 Confluence Post Auth RCE
cve_python
Latest CVEs with their Proof of Concept exploits.
dahuaExploitGUI
dahua综合漏洞利用工具
directory-payload-list
🎯 Directory Payload List
ffuf
Fast web fuzzer written in Go
FlareSolverr
Proxy server to bypass Cloudflare protection
hammal
docker-registry proxy run in cloudflare workers
mubeng
An incredibly fast proxy checker & IP rotator with ease.
nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
open-redirect-payload-list
🎯 Open Redirect Payload List
POC
收集整理漏洞EXp/POC,大部分漏洞来源网络，目前收集整理了700多个poc/exp，长期更新。
rfi-lfi-payload-list
🎯 RFI/LFI Payload List
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
SecretFinder
SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
SocialEngineeringDictionaryGenerator
社会工程学密码生成器，是一个利用个人信息生成密码的工具
sql-injection-payload-list
🎯 SQL Injection Payload List
ssti-payloads
🎯 Server Side Template Injection Payloads
TextFilterFuzzer
TextFilterFuzzer For Directory Fuzzing - filter for (e.g, Not Found, 404, Not Accepted)
vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
xss-payload-list
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List