test's repositories
Behinder
“冰蝎”动态二进制加密网站管理客户端
BlackDex
BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.
EasyReport
A simple and easy to use Web Report System for java.EasyReport是一个简单易用的Web报表工具(支持Hadoop,HBase及各种关系型数据库),它的主要功能是把SQL语句查询出的行列结构转换成HTML表格(Table),并支持表格的跨行(RowSpan)与跨列(ColSpan)。同时它还支持报表Excel导出、图表显示及固定表头与左边列的功能。
email_hack
A email bomb/fake email tool written by Python.
Frida-Scripts
一些frida脚本
frida-unpack
基于Frida的脱壳工具
GitHacker
🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind
GSIL
GitHub Sensitive Information Leakage(GitHub敏感信息泄露)
HttpCanary
A powerful capture and injection tool for the Android platform
insight
洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
ivideo
一个可以观看国内主流视频平台所有视频的客户端(Mac、Windows、Linux),包括 VIP 资源
Jenkins-PreAuth-RCE-PoC
Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)
JustTrustMe
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
libprocesshider
Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)
MemoryShell
JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring
Penetration_Testing_POC
渗透测试有关的POC、脚本、提权小工具等,欢迎补充、完善
reCAPTCHA
reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
Safety-Project-Collection
收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
SecDictionary
实战沉淀字典
Viper
Redteam operation platform with webui 图形化红队行动辅助平台
viperpython
viper 后台代码
VirtualXposed
A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
webshell
This is a webshell open source project
webshell-sample
收集自网络各处的 webshell 样本,用于测试 webshell 扫描器检测率。
wfuzz
Web application fuzzer
wxappUnpacker
Wechat App(微信小程序,.wxapkg)解包及相关文件(.wxss,.json,.wxs,.wxml)还原工具
x-patrol
github泄露扫描系统