woshi56789 Goto Github PK

oneforall

OneForAll是一款功能强大的子域收集工具

openrasp

Open source RASP solution

openvas-scanner

OpenVAS remote network security scanner

parcel-vue

pentest-tools

内网渗透的一些工具

pentest-tools-1

内网渗透工具

pentest_tools

收集一些小型实用的工具

phuip-fpizdam

Exploit for CVE-2019-11043

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

powershell_fisher

利用powershell收集用户浏览器中保存的密码，桌面办公文件，电脑硬件软件信息。发送到指定邮件

red_team_tool_countermeasures

responder

获取本地子网上的LLMNR或NetBIOS请求中的Windows散列：Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rxexcel

自动读、写excel

sec-chart

安全思维导图集合

sn1per

Automated pentest framework for offensive security experts

sqlmap

Automatic SQL injection and database takeover tool

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

struts2poc

subdomainsbrute

子域名爆破

thc-hydra

hydra

w9scan

学习python，学习黑客

watchad

AD Security Intrusion Detection System

winshock-test

Bash script that tests if a system is Winshock (MS14-066) vulnerable

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xsec-ip-database

xsec-ip-database为一个恶意IP和域名库（Malicious ip database）

xssfork

yulong-hids

一款由 YSRC 开源的主机入侵检测系统