shelu16 Goto Github PK

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shellcodeloader

shellcodeloader

site

slipstream

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by the victim visiting a website

ssrf-tool

status

stock-prediction-ai

susi_android

SUSI.AI Android App https://play.google.com/apps/testing/ai.susi

tentacle

Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

the-book-of-secret-knowledge

:zap: A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.

thinkphp-rce-poc-collection

thinkphp v5.x 远程代码执行漏洞-POC集合

twittercybermonitor

A joint project with Adam McMurchie and Danny Storage on generating up to date cyber topics being tweeted globally.

useful-random-scripts

Just a bunch of useful scripts for netsec/admin/others

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulmap

Vulmap - Web漏洞扫描和验证工具，可对Web容器、Web服务器、Web中间件以及CMS等Web程序进行漏洞扫描，并且具备漏洞利用功能。 相关测试人员可以使用vulmap检测目标是否存在特定漏洞，并且可以使用漏洞利用功能验证漏洞是否真实存在。CVE-2020-14882, CVE-2020-2555, CVE-2020-2883

weblogicscan

Weblogic一键漏洞检测工具，V1.5，更新时间：20200730

weblogicscanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551

wordlists

Various Payload wordlists

write-ups-2016

Wiki-like CTF write-ups repository, maintained by the community. 2016

xerror

fully automated pentesting tool