DirScan是一款探测网站路径存活的工具,扫描批量网站的路径(目录或文件或Api)，快速发现薄弱点

fastjson 被动扫描、不出网payload生成

适合在命令行中使用的轻巧的SQL Server数据库安全检测工具

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

信息收集自动化工具

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.…

一款用于src资产信息收集的工具

🧬 辅助生成 XRay YAML POC

Behinder3.0 Beta4 源码（Decompile and Fixed）

Convert HTML to Markdown.

An open source trusted cloud native registry project that stores, signs, and scans content.

SlowMist Vulnerability Research Advisories

MS17-010

Digital Bond's ICS Enumeration Tools

Basic pwntools for Windows

The best tool for finding one gadget RCE in libc.so.6

dump

The new Windows Terminal and the original Windows console host, all in the same place!

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

A simple dns resolver of dns-record and web-record log server for pentesting

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

CVE-2019-6340-Drupal SA-CORE-2019-003

Dockerfile of Oracle Database Express Edition 11g Release 2

A docker image of Oracle Express Edition 11g Release 2 on CentOS 7

A python script that finds endpoints in JavaScript files

A simple, fast and user-friendly alternative to 'find'

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.