Xray panel supporting multi-protocol multi-user expire day & traffic & ip limit (Vmess & Vless & Trojan & ShadowSocks)

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

All about bug bounty (bypasses, payloads, and etc)

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

利用IP地址池进行自动切换Http代理，防止IP封禁。

Penetration Test ☞ Experience/thought/summary

AWSGoat : A Damn Vulnerable AWS Infrastructure

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

Burp Extension for a passive scanning JS files for endpoint links.

BurpSuite Pro Loader & Keygen & Translator Fix ( BurpSuite version v2020.1 - ∞ )

Burpsuite Extension to bypass 403 restricted directory

Bypass 403 or 401 or 404

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

📦 Make security testing of K8s, Docker, and Containerd easier.

Burp suite 分块传输辅助插件

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

A fast and lightweight interactive terminal based UI application for tracking cryptocurrencies 🚀

🐝 C段快速扫描工具 Cscan

Gather and update all available and newest CVEs with their PoC.

带带弟弟 通用验证码识别OCR pypi版

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Information Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

Web path scanner