samidunimsara

Samidu Nimsara's starred repositories

pentest-tools

A collection of custom security tools for quick needs.

Language:Python313300

http-garden

Differential fuzzing REPL for HTTP implementations.

Language:PythonGPL-3.070200

cook

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

Language:GoMIT102600

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Language:GoGPL-3.0130700

x8

Hidden parameters discovery suite

Language:RustGPL-3.0167300

Bash-Oneliner

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

MIT1019300

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

372800

FileMonitor

文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)

Language:Python70600

SiftScan 是一个集成资产识别、资产梳理、资产收集、弱点检测、漏洞检测等的工具。它致力于提高红蓝对抗/脆弱性赏金的效率。is a tool that integrates asset identification, asset sorting, asset collection, vulnerability detection, vulnerability detection, etc. It is committed to improving the efficiency of the red-blue confrontation/vulnerability bounty.

4800

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

Language:Java112300

ChYing

承影 - 一款安全工具箱,集成了目录扫描、JWT、Swagger 测试、编/解码、轻量级 BurpSuite、杀软辅助功能

Language:GoAGPL-3.036800

Blockchain-dark-forest-selfguard-handbook

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

539100

NucleiTP

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

NOASSERTION258200

Awesome-Redteam

一个攻防知识仓库 Red Teaming and Offensive Security

Language:Python356600

Awesome-POC

一个漏洞POC知识库目前数量 1000+

353900

Watering-Hole-Attack

申明：仅供教学演示，禁用非法、未授权等进行钓鱼，后果自负。

Language:JavaScriptGPL-3.01000

VcenterKiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

Language:GoApache-2.0131500