smallmeet

papers

my security summit papers

Peanuts

Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.

Ares

Python botnet and backdoor

vulscan

Advanced vulnerability scanning with Nmap NSE

sensitivefilescan

Crawlic

Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)

ark

分布式扫描框架

BurpCRLFPlugin

Another plugin for CRLF vulnerability detection

googlesearch

Google search from Python (unofficial).

hodor

A Scaleable and Asynchronous Framework for Testing Tools built on Kubernetes

pynmap

A serious attempt to implement multi-threading to nmap module, which would result in faster scanning speed. I know that one can write NSE scripts for multi-threaded scanning with it, but I wanted to try it on python.

sqli-scanner

A tool to mass scan SQL Injection Vulnerable websites from a file.

DamnWebScanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

sqliv

massive SQL injection vulnerability scanner

intrigue-core

Discover Your Attack Surface!

TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

hackable

A python flask app that is purposefully vulnerable to SQL injection and XSS attacks. To be used for demonstrating attacks

dnspod_web

利用dnspod api+django二次开发域名管理系统

opman-django

:100::white_check_mark:自动化运维平台：CMDB、CI/CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

hiccupy

Jython binding for Burp to facilitate realtime traffic analysis and modification using simple plugins.

githubscan

根据关键字扫描github代码泄露

backdoorppt

transform your payload.exe into one fake word doc (.ppt)

WAF-Tester

WAF 测试工具 --- 用例测试

Single-Website-Crawler-and-SQLi-Checker

Simple but effective tool in two parts. Will not hang on large website too.

sqlitest

Job_P2P_Scrapy

FileExisted

WEB服务文件探测

s0m3poc

a poc framework to test hosts via zoomeye sdk

wp-api-exploit-v4.7.0-v4.7.1

WordPress 4.7.0-4.7.1 REST API Post privilege escalation / defacement exploit