ph0eby Goto Github PK

111

OpenVAS（Vulnerability Assessment System）

applicationinspector

A software characterization source code analyzer that helps you understand what a program does by identifying interesting features and characteristics using static analysis and a customizable json based rules engine.

arachni

Web Application Security Scanner Framework

balloon

Flash code of balloon

blasting_dictionary

爆破字典

blog

Sep0lkit's Blog

cotopaxi

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

dirsearch

Web path scanner

docker-openvas

Docker image for OpenVAS 9

enos-iot-sdk-c

fortify-plugin

Fortify Jenkins plugin

fortify-ssc-parser-clair-rest

Fortify SSC parser plugin for parsing JSON output generated by Clair REST API

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gsa

Greenbone Security Assistant

gvm-docker

A Docker Image For Greenbone Vulnerability Management with OpenVAS

gvm-libs

Greenbone Vulnerability Management Libraries

gvm-tools

Remote control your Greenbone Vulnerability Manager (GVM)

gvmd

Greenbone Vulnerability Manager

hassh-utils

hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hassh)

hunt-for-cve-2018-10933

Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

naive-hashcat

Crack password hashes without the fuss :cat2:

nginx-demos

NGINX and NGINX Plus demos

openvas

Open Vulnerability Assessment Scanner

openvas-docker

OpenVAS docker container

plugin-api

Plugin API to develop plugin for Fortify Security Center

poc

PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus

python-gvm

Greenbone Vulnerability Management Python Library

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.