yhy0

github-cve-monitor

实时监控github上新增的cve、自定义关键字、安全工具更新、大佬仓库监控，并多渠道推送通知

Jie

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

ChYing

承影 - 一款安全工具箱,集成了目录扫描、JWT、Swagger 测试、编/解码、轻量级 BurpSuite、杀软辅助功能

AVByPass

一款Web在线自动免杀工具

passive-scan-client

Burp被动扫描流量转发插件

nucleiY

承影用的 nuclei 漏扫模板

FakeToa

TCP IP伪造,建议使用 ubuntu 22.04

yhy0.github.io

博客

hydra

没什么用，外网扫描出来的概率太小了，得不偿失，先分出来，后续再看看加不加入吧

JiePaper

Jie 漏洞扫描器中关于漏洞扫描的设计

Ouroboros

katana

A next-generation crawling and spidering framework.

awesome-wails

⭐ A carefully selected list of Wails applications

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

NotionNext

使用 NextJS + Notion API 实现的，支持多种部署方案的静态博客，无需服务器、零门槛搭建网站，为Notion和所有创作者设计。 (A static blog built with NextJS and Notion API, supporting multiple deployment options. No server required, zero threshold to set up a website. Designed for Notion and all creators.)

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

PicGoImg

PicGo 图床

sizedwaitgroup

SizedWaitGroup has the same role and close to the same API as the Golang sync.WaitGroup but it adds a limit on the amount of goroutines started concurrently.

Spark

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。

yhy0

自述

Argo

Argo is an automated general crawler for automatically obtaining website URLs . Argo 是一个自动化通用爬虫 用于自动化获取网站的URL 基于无头浏览器实现了静态和动态结合的方式来实现

go-mitmproxy

mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。

java-memshell-generator

一款支持高度自定义的 Java 内存马生成工具｜A highly customizable Java memory-shell generation tool.

logging

logging

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Platane

Shadowrocket-ADBlock-Rules-Forever

提供多款 Shadowrocket 规则，拥有强劲的广告过滤功能。每日8时重新构建规则。

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library