Tiger是一款在攻防演练中对目标资产重点系统指纹识别、精准漏扫的工具。是一款打点神器。

哥斯拉webshell管理工具二次开发规避流量检测设备

密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、密码字典等功能

Note: I am not responsible for any bad act. This is written by Chirag Artani to demonstrate the vulnerability.

数据库利用工具(扩展版本)发布仓库

收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了900多个poc/exp，长期更新。

DecryptTools-综合解密

TCP IP伪造,建议使用 ubuntu 22.04

Open-Source Phishing Toolkit

web登录密码爆破

一个高级web目录扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑

A Security Tool for Bug Bounty, Pentest and Red Teaming.

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Automated penetration and auxiliary systems, providing XSS, XXE, DNS log, SSRF, RCE, web netcat and other Servers,gin-vue-admin，online https://51pwn.com

wx_SessionKey解密插件

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

oa高危漏洞利用工具

自己搜集的爆破字典，包括常用用户名、密码弱口令、SQL万能密码等

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Java编写，Python作为辅助依赖的漏洞验证、利用工具，添加了进程查找模块、编码模块、命令模块、常见漏洞利用GUI模块、shiro rememberMe解密模块，加快测试效率

Cyber Security ALL-IN-ONE Platform

Deep Learning model to analyze a large corpus of clear text passwords.

POC&EXP仓库、hvv弹药库、Nday、1day

Compression Library accelerated by Intel® QuickAssist Technology

2021hvv漏洞汇总

Curiefense extends Envoy proxy to defend against a variety of threats, including SQL and command injection, cross site scripting (XSS), account takeovers (ATOs), application-layer DDoS, remote file…

⚠️ Browser fingerprinting via favicon!