🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

Deserialization payload generator for a variety of .NET formatters

2023 HVV情报速递~

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Nmap script to guess* a GitLab version.

Web弱密码爆破工具, 驱动浏览器进行弱密码爆破, 支持所有Web系统. 协程练手项目

在渗透测试中快速检测常见中间件、组件的高危漏洞。

对在测试中常见的swagger页面泄露 ，进行批量的测试，未授权和被动扫描

Weblogic一键漏洞检测工具，V1.5，更新时间：20200730

一个半自动化springboot打点工具，内置目前springboot所有漏洞

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

一个简单的Fastjson反序列化检测burp插件

用于Web安全测试的字典

unleashed ffuf

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

The recursive internet scanner for hackers. 🧡

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

The Network Execution Tool

Java RMI Vulnerability Scanner