nebrvherbvqljwvb

FofaMap是一款基于Python3开发的跨平台FOFA API数据采集器，支持普通查询、网站存活检测、统计聚合查询、Host聚合查询、网站图标查询、批量查询等查询功能。同时FofaMap还能够自定义查询FOFA数据，并根据查询结果自动去重和筛选关键字，生成对应的Excel表格。另外春节特别版还可以调用Nuclei对FofaMap查询出来的目标进行漏洞扫描，让你在挖洞路上快人一步。

Language:PythonApache-2.046900

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Language:GoMIT1898800

404StarLink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

810800

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

Language:Python86200

ShiroExploit-Deprecated

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

Language:Java186600

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

Language:DockerfileMIT1726900

vulfocus

🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。

Language:VueApache-2.0313900

beef

The Browser Exploitation Framework Project

Language:JavaScript963700

WebGoat

WebGoat is a deliberately insecure application

Language:JavaScriptNOASSERTION677500

project-based-learning

Curated list of project-based tutorials

MIT19159000

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT5911700

Finger

一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具

Language:Python154800

OneForAll

OneForAll是一款功能强大的子域收集工具

Language:PythonGPL-3.0804700

HackReport

渗透测试报告/资料文档/渗透经验文档/安全书籍

Language:Python238200

mimikatz

A little tool to play with Windows security

Language:C1915300

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Language:PowerShellMIT573800

NotionNext

使用 NextJS + Notion API 实现的，支持多种部署方案的静态博客，无需服务器、零门槛搭建网站，为Notion和所有创作者设计。 (A static blog built with NextJS and Notion API, supporting multiple deployment options. No server required, zero threshold to set up a website. Designed for Notion and all creators.)

Language:JavaScriptMIT688600

nebrvherbvqljwvb