i-was-a-fish Goto Github PK

cobra

Cobra（眼镜蛇） - Static code security scanner & analyser (白盒代码安全扫描与分析系统)

cve-2021-26855

CVE-2021-26855 exp

dirty-cow-cve-2016-5195-testing

Dirty COW (CVE-2016-5195) Testing

empire

Empire is a PowerShell and Python post-exploitation agent.

exploit-database

The official Exploit Database repository

get_av

Windows杀软在线对比辅助

goscraper

Golang pkg to quickly return a preview of a webpage (title/description/images)

gryffin

Gryffin is a large scale web security scanning platform

hackrequests

It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.

hellraiser

Vulnerability Scanner

icmpsh

Simple reverse ICMP shell

iotseeker

Created by Jin Qian via the GitHub Connector

jocationrelease

IOS免越狱虚拟定位修改

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

micro8

Gitbook

morphhta

morphHTA - Morphing Cobalt Strike's evil.HTA

nagascan

NagaScan is a distributed passive scanner for Web application.

openwrt-ss-kcp-tor

run ss&kcp&tor on openwrt, provide a transparent proxy for pc/phone

pentestkoala

Modified dropbear server which acts as a client and allows authless login

phishlulz

phuip-fpizdam

post-exploitation

Post Exploitation Collection

pyjfuzz

PyJFuzz - Python JSON Fuzzer

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

roothelper

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

shell-scripts

Linux Shell Scripts

sublist3r

Fast subdomains enumeration tool for penetration testers

supplier

主流供应商的一些攻击性漏洞汇总