flywithoutwings Goto Github PK

sharpcookiemonster

chrome cookie提取工具 Extracts cookies from Chrome.

sharplocker

Windows凭证的伪造和窃取工具，可以伪造Windows的用户登录界面

sharpmapexec

针对网络渗透测试高级瑞士Knife

sickle

shellcode开发工具Shellcode development tool

simplyemail

社工邮件收集工具，基于theHarvester，SimpleEmail is a email recon tool that is fast and easy framework to build on

smarttubenext

Ad free app for watching tube videos on Android TV boxes

smb-version

Python版smb_version信息搜集工具 Python script to get Samba Server Version

smbexec

通过smb远程执行命令execute remote cmd with smb like psexec

smbghost

Scanner for CVE-2020-0796 - SMBv3 RCE

smbghost_rce_poc

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

socialscan

Socialscan：一款准确且快速的在线邮件地址及用户名查询工具 Check email address and username availability on online platforms with 100% accuracy

springcss-cve-2014-3625

spring mvc cve-2014-3625

sql-injection-dorks-list

Nice list of google dorks for SQL injection

sqlmap-tamper

sqlmap绕过waf等脚本

ssf

能转发udp的跨平台端口转发代理工具Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform

ssh-mitm

ssh中间人攻击工具 ssh mitm server for security audits supporting public key authentication, session hijacking and file manipulation

ssrr-windows

stegseek

破解隐写工具 :zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

subdomainsbrute

A fast sub domain brute tool for pentesters

supersqlinjectionv1

超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库；支持手动灵活的进行SQL注入绕过，可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计，需要使用人员对SQL注入有一定了解。

sweetpotato

SweetPotato修改版，用于webshell下执行命令 windows提权工具

the-hackers-hardware-toolkit

硬件黑客工具手册The best hacker's gadgets for Red Team pentesters and security researchers.

tongdaoa-fake-user

通达OA 任意用户登录漏洞

tools

PVEFindADUser.exe 可用于查找活动目录用户登陆的位置、枚举域用户，以及查找在特定计算机上登陆的用户，包括查找本地用户。GitHub repository for sysadmin related tools

tpscan

一键ThinkPHP漏洞检测

trevorc2

TrevorC2克隆网站并作为控制服务器，在被控主机上运行客户端脚本自动访问克隆后的网站，服务端监听回连会话并可执行命令，支持多个会话。TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

trojan

An unidentifiable mechanism that helps you bypass GFW.

trojan-go

Go实现的Trojan代理，支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件，多平台，无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/