T1ng

katana

A next-generation crawling and spidering framework.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

spyhunt

recon for bug hunters

SpringSpider

Spring Actuator端点的BurpSuite被动扫描插件。

dirsearch_bypass403

目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

ClassHound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

laoyue

自动化监控赏金项目-定期收集资产,漏洞进行推送(现在可以稳定收菜,有问题issues我)-关注-夜安团队SEC-加我微信进群可下载最新自动化版本,git目前不会更新了,群里目前版本1.3.1,项目优化了非常多,功能也加入了非常多,建议进群(没收费项目放心白嫖)

gobuster

Directory/File, DNS and VHost busting tool written in Go

BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

onos-helm-charts

Helm charts for ONOS (µONOS Architecture)

JavaFileDict

Java应用的一些配置文件字典，来源于公开的字典与平时收集

JSFinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

bruteforce-lists

Some files for bruteforcing certain things.

Shockwave-OSS

JDumpSpider

HeapDump敏感信息提取工具

heapdump_shiro_vuln

A heapdump leaks Shiro key causing RCE vulnerability environment.

Unidbg_FindKey

KeyFinder 是一个Unidbg插件，通过内存检索的方式查找AES的密钥，增强Unidbg分析和还原算法的能力。

Dobby

a lightweight, multi-platform, multi-architecture hook framework.

hooker

🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe、disable ssl pinning

TerraformGoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

s3-bucket-scanner

Scanner for public s3 buckets

mod0BurpUploadScanner

HTTP file upload scanner for Burp Proxy

findhash

一个IDA脚本，可以检测出哈希算法（无论是否魔改常数）并生成frida hook 代码。

IDASignsrch

IDA_Signsrch in Python

frida-java-bridge

Java runtime interop from Frida

frida_hook_libart

Frida hook some jni functions

uber-apk-signer

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.

unidbg

Allows you to emulate an Android native library, and an experimental iOS emulation

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy