wwwziziyu

netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io.

404StarLink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

Hackberry-Pi_Zero

A handheld Linux terminal using Raspberry pi Zero 2W as Core with 4" 720X720 TFT display

xpoc

为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.

info_scan

自动化漏洞扫描系统，一键完成相关漏洞扫描、资产处理、IP基础信息探测，系统采用B/S架构，系统分为源码安装和开箱即用的虚拟机，持续更新中......

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。

API-Explorer

API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

rad

subfinder

Fast passive subdomain enumeration tool.

pdf-exploit

POC Pdf-exploit builder on C#

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Awesome-Laws

一个网络安全法律法规、安全政策、国家标准、行业标准知识库

prismx

:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具

ghidra

Ghidra is a software reverse engineering (SRE) framework

SharpUp

SharpUp is a C# port of various PowerUp functionality.

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

LaZagne

Credentials recovery project

mimikatz

A little tool to play with Windows security

param-miner

godscan

ENScan_GO

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

fastbt

以蓝队为核心针对红队web指纹识别

xurlfind3r

A command-line interface (CLI) based passive URLs discovery utility. It is designed to efficiently identify known URLs of given domains by tapping into a multitude of curated online passive sources.

Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

TscanPlus

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

url-tracker

Change monitoring app that checks the content of web pages in different periods.

jjjjjjjjjjjjjs

爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应

hbit

一款用于安全测试中信息收集的自动化工具