lookout2020 Goto Github PK

gateone

Gate One is an HTML5-powered terminal emulator and SSH client

git-history

Quickly browse the history of a file from any git repository

github-cve-monitor

实时监控github上新增的cve和安全工具更新，多渠道推送通知

godofhacker

黑客神器

godzilla

哥斯拉

gourdscanv2

被动式漏洞扫描系统

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

harviewer

HAR Viewer is a web application that allows visualizing HTTP Archive logs (HARs)

hawkeye

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

heapdump_tool

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

hunter

Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。

impacket

Impacket is a collection of Python classes for working with network protocols.

infoscaner

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jpmml-model

Java Class Model API for PMML

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

keycloak

Open Source Identity and Access Management For Modern Applications and Services

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

log4j-check

log4J burp被扫插件、CVE-2021-44228、支持dnclog.cn和burp内置DNS、可配合JNDIExploit生成payload

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

logcat

这是一个Android 上 效率极高的 Log 工具，主要功能为控制不同级别的Log输出,Log信息保存到文件、打印行号、函数调用、Json解析、点击跳转、多标签Tag 支持无限长字符串打印，无Logcat4000字符限制等功能

machinae

Machinae Security Intelligence Collector

mall

mall项目是一套电商系统，包括前台商城系统及后台管理系统，基于SpringBoot+MyBatis实现，采用Docker容器化部署。 前台商城系统包含首页门户、商品推荐、商品搜索、商品展示、购物车、订单流程、会员中心、客户服务、帮助中心等模块。 后台管理系统包含商品管理、订单管理、会员管理、促销管理、运营管理、内容管理、统计报表、财务管理、权限管理、设置等模块。