Beast code in Giters

tudouya's starred repositories

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT5851200

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

Language:PythonGPL-3.048100

LearnSQLin

📖面向MySQL注入的一些技巧

3100

GitPrey

Searching sensitive files and contents in GitHub associated to company name or other key words

Language:PythonGPL-3.060000

rext

Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.

Language:PythonGPL-3.034400

dvxte

Damn Vulnerable eXtensive Training Environment

Language:DockerfileMIT10200

Stitch

Python Remote Administration Tool (RAT)

Language:PythonNOASSERTION299700

chromebackdoor

Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.

Language:CSS50400

Local-file-disclosure-SQL-Injection-Lab

This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at https://twitter.com/IndiShell1046 :)

Language:PHP4400

sniffly

Sniffing browser history using HSTS

Language:JavaScriptMIT93500

intrigue-core

Discover Your Attack Surface!

Language:RubyNOASSERTION133800

php-malware-finder

Detect potentially malicious PHP files

Language:PHPLGPL-3.0146200

logtamper

python修改linux日志

Language:Python100

IncExtensiveList

从扫描器结果分离出的一些大公司泛解析ip列表

Language:Python6000

webbies

Collection of tools for web recon and enumeration.

Language:PythonMIT5600

subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)

Language:PythonMIT70800

awesome-chinese-infosec-websites

A curated list of Chinese websites and personal blogs about ethical hacking and pentesting

10000

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Language:PythonMIT338200

naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

Language:CGPL-3.0477700

doom

DOOM是在thorn上实现的分布式任务分发的ip端口漏洞扫描器

Language:PHP13900

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

812500

awesome-ml-for-cybersecurity

:octocat: Machine Learning for Cyber Security

NOASSERTION701500

Github_Nuggests

自动爬取Github上文件敏感信息泄露，抓取邮箱密码并自动登录邮箱验证，支持126，qq，sina，163邮箱

Language:Python34000

CapTipper

Malicious HTTP traffic explorer

Language:PythonGPL-3.070700

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

28100

FingerPrint

web应用指纹识别

Language:Perl10400

pentestER-Fully-automatic-scanner

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

Language:Python36600

rainmap-lite

Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

Language:PythonGPL-3.023100

hedwig

Hedwig is a commit monitor for GitHub using the GitHub REST API.

Language:PythonMPL-2.0300

IntruderPayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

Language:BlitzBasic358200