Apache Log4j 远程代码执行

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Finds Directory Listings or open S3 buckets from a list of URLs

Scanner for Cross-Site WebSocket Hijacking

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!