ethancck Goto Github PK

security_codes

个人安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档

shellcodeloader

shellcodeloader

shellerator

Simple CLI tool for the generation of bind and reverse shells in multiple languages

shiroscan

Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)

shiro_rce

shiro rce 反序列 命令执行 一键工具 回显

shodanfy.py

Get ports,vulnerabilities,informations,banners,..etc for any IP with Shodan (no apikey! no rate-limit!)

shots

smbghost_rce_poc

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sn1per

Automated pentest framework for offensive security experts

spiderfoot

SpiderFoot automates OSINT so you can focus on analysis.

spring-boot-vulnerability

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

sql-injection-payload-list

🎯 SQL Injection Payload List

sshd_backdoor

/root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook.

ssrf-king

SSRF plugin for burp Automates SSRF Detection in all of the Request

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

striker

Striker is an offensive information and vulnerability scanner.

struts2-scan

Struts2全漏洞扫描利用工具

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

sublist3r

Fast subdomains enumeration tool for penetration testers

superwordlist

基于实战沉淀下的各种弱口令字典

swagger-exp

A Swagger API Exploit

tabby

A CAT called tabby ( Code Analysis Tool )

teler

Real-time HTTP Intrusion Detection

tfofa

一个使用Fofa API查询的小工具

theharvester

E-mails, subdomains and names Harvester - OSINT

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙