zilyl's starred repositories

captcha-killer

burp验证码识别接口调用插件

Language:JavaStargazers:880Issues:0Issues:0

hackingtool

ALL IN ONE Hacking Tool For Hackers

Language:PythonLicense:MITStargazers:50504Issues:0Issues:0

godlp

sensitive information protection toolkit

Language:GoLicense:MITStargazers:955Issues:0Issues:0

JSINFO-SCAN

递归式寻找域名和api。

Language:PythonStargazers:705Issues:0Issues:0

HowToCook

程序员在家做饭方法指南。Programmer's guide about how to cook at home (Simplified Chinese only).

Language:DockerfileLicense:UnlicenseStargazers:67229Issues:0Issues:0

sunlogin_rce

向日葵 RCE

Language:GoStargazers:484Issues:0Issues:0

vulscan

vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

Language:PythonLicense:MITStargazers:625Issues:0Issues:0

monitor

漏洞监控平台——Monitor。目前实现了监控GitHub、微软、CNNVD三者的漏洞信息,并使用企业微信实时推送。还可以使用邮箱推送,默认关闭。

Language:PythonStargazers:441Issues:0Issues:0

conote-community

Conote 综合安全测试平台社区版。

Language:CSSStargazers:372Issues:0Issues:0

knock

Knock Subdomain Scan

Language:PythonLicense:GPL-3.0Stargazers:3876Issues:0Issues:0

nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Language:GoLicense:MITStargazers:20591Issues:0Issues:0

JNDI-Injection-Exploit

JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)

Language:JavaLicense:MITStargazers:2591Issues:0Issues:0
Language:JavaLicense:MITStargazers:3392Issues:0Issues:0

cool

Golang-Gin 框架写的免杀平台,内置分离、捆绑等多种BypassAV方式。

Language:HTMLStargazers:689Issues:0Issues:0

ProxyPool

An Efficient ProxyPool with Getter, Tester and Server

Language:PythonLicense:MITStargazers:5765Issues:0Issues:0

RSAS_Task_Tool

🐱‍🐉绿盟科技NSFOCUS_极光远程安全评估系统(RSAS)_Python-GUI批量添加扫描任务工具

Language:PythonStargazers:26Issues:0Issues:0

awvs14-scan

针对 Acunetix AWVS扫描器开发的批量扫描脚本,支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项,支持联动xray、burp、w13scan等被动批量

Language:PythonStargazers:1095Issues:0Issues:0

CVE-2021-22205

CVE-2021-22205 Unauthorized RCE

Language:PythonStargazers:69Issues:0Issues:0

rotateproxy

利用fofa搜索socks5开放代理进行代理池轮切的工具

Language:GoStargazers:775Issues:0Issues:0

Kunyu

Kunyu, more efficient corporate asset collection

Language:PythonLicense:GPL-2.0Stargazers:1013Issues:0Issues:0

tig

Threat Intelligence Gathering 威胁情报收集,旨在提高蓝队拿到攻击 IP 后对其进行威胁情报信息收集的效率。

Language:PythonLicense:Apache-2.0Stargazers:851Issues:0Issues:0

CORS-SCAN

扫描存在CORS跨域漏洞的网站。

Language:PythonStargazers:91Issues:0Issues:0

JSONP-Hunter

JSONP Hunter in burpsuite.

Language:PythonStargazers:207Issues:0Issues:0

EyeJo

EyeJo是一款自动化资产风险评估平台,可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查,快速发现存在的薄弱点和攻击面。

Language:PythonStargazers:458Issues:0Issues:0

webshell

免杀webshell生成工具

Language:PythonStargazers:725Issues:0Issues:0

red-tldr

red-tldr is a lightweight text search tool, which is used to help red team staff quickly find the commands and key points they want to execute, so it is more suitable for use by red team personnel with certain experience.

Language:GoLicense:MITStargazers:230Issues:0Issues:0

PHP

PHP训练靶场

Language:CSSStargazers:663Issues:0Issues:0

masnmapscan-V1.0

一款用于资产探测的端口扫描工具。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。

Language:PythonStargazers:779Issues:0Issues:0

HackReport

渗透测试报告/资料文档/渗透经验文档/安全书籍

Language:PythonStargazers:2539Issues:0Issues:0

AliyunAccessKeyTools

阿里云AccessKey泄漏利用工具

Language:C#Stargazers:142Issues:0Issues:0