银狐排障专用工具

攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。

IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）

Come and join us, we need you!

BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件

magicReform_cobaltstrike

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PowerSploit - A PowerShell Post-Exploitation Framework

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk: https://www.youtube.com/watch?v=Ul8uPvlOsug

WAF Research