Hacker-One

WindowsExploits. Windows Exploit List

MSSQL_SQL_BYPASS_WIKI. MSSQL注入提权,bypass的一些总结

shiro_rce. shiro rce 反序列 命令执行 一键工具

Scanners-Box. A powerful hacker toolkit which collects more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

vulnerability-assessment-tool. Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://sap.github.io/vulnerability-assessment-tool/

PHP-Audit-Labs. 一个关于PHP的代码审计项目

Bridge. 无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。

fastjson_rce_tool. fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制

SuperWordlist. 基于实战沉淀下的各种弱口令字典

evilpdf. Embedding executable files in PDF Documents

LangSrcCurise. SRC子域名资产监控

shadowsuid. shadowsuid;shadow suid

firmwalker. Script for searching the extracted firmware file system for goodies!

hackbar2.1.3.

backdoor_rootkit. C

ipasim. iOS emulator for Windows

XSStrike. Most advanced XSS scanner.

the-backdoor-factory. Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)

pocsuite_poc_collect. collection poc use pocsuite framework 收集一些 poc with pocsuite框架

sqlchop. [DEPRECATED]A novel SQL injection detection engine built on top of SQL tokenizing and syntax analysis.