A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

Vue框架未授权接口扫描工具

oss存储桶遍历漏洞利用脚本

网络安全 · 攻防对抗 · 蓝队清单，中文版

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等

Windows应急响应工具---Hawkeye(鹰眼)。集Windows日志分析，进程扫描，主机信息于一体的综合应急响应分析工具

Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Find, verify, and analyze leaked credentials

Cloud Native Runtime Security

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

deadpool代理池工具，可从hunter、quake、fofa等网络空间测绘平台取高质量socks5代理，或本地导入socks5代理，轮询使用代理进行流量转发。

备份的漏洞库，3月开始我们来维护

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

dirsx 是一款能够自动化过滤扫描结果的目录扫描工具

best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect

NSudo - A Powerful System Administration Tool

KCon is a famous Hacker Con powered by Knownsec Team.

一款用于安全测试中信息收集的自动化工具

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

Gather and update all available and newest CVEs with their PoC.

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

远程调用(rpc)浏览器方法，免去抠代码补环境

Community curated list of templates for the nuclei engine to find security vulnerabilities.