安卓应用层抓包通杀脚本

Burp Extension for a passive scanning JS files for endpoint links.

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

OA漏洞利用工具

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

学习Python过程中，写的一些最新漏洞的验证poc

afrog-pocs 是 afrog 漏洞检测工具的官方 PoCs（Proof of Concepts）库。

A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

A flexible scanner

Six Degrees of Domain Admin

哥斯拉

generate CobaltStrike's cross-platform payload

Cobalt Strike系列

Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks.

Windows Exploit Suggester - Next Generation

A next generation HTTP client for Python. 🦋

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

批量验证是否属于补天的公益src

Pyright extension for coc.nvim

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、密码字典等功能

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

⛅ The right way to check the weather

Pretty fancy and modern terminal file manager

A Security Tool for Bug Bounty, Pentest and Red Teaming.