鸭王

fuzzDicts. You Know, For WEB Fuzzing !

burpFakeIP. 服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

ApkAnalyser. 一键提取安卓应用中可能存在的敏感信息。

FileMonitor. 文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)

easyXssPayload. XssPayload List . Usage:

MySQLMonitor. MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)

Loki. 一个轻量级Web蜜罐 - A Little Web Honeypot.🍯🍯🍯🐝🐝🐝

MatryoshkaDollTool. MatryoshkaDollTool-程序加壳/捆绑工具

logonTracer. Windows系统安全登录日志分析工具logonTracer汉化修正版

RCEFuzzer. 一个以fuzz为中心思想的被动扫描工具

domain_screen. 站点批量截图

XSS-Fishing2-CS. 鱼儿在cs上线后自动收杆|Automatically stop fishing in javascript after the fish is hooked

SBCVE. 不定期记录一下浪费了时间去关注过的垃圾CVE漏洞。

evilzip. evilzip lets you create a zip file(with password) that contains files with directory traversal characters in their embedded path.

paramFuzzer. 一款高效的参数fuzz工具|A faster param fuzzing test tool

BypassAVAddUsers. 绕过杀毒软件添加用户

ReverseGoShell. A Golang Reverse Shell Tool With AES Dynamic Encryption

hashdump. Dumping Windows Local Credentials Tools/Tricks

hostnamePot. 通过Web获取访客机器的hostname字段内容。

geacon. 修改自geacon的多功能linux运维管理工具

myScripts. 一个垃圾桶

Copy2Java. 一键生成Java代码的burp插件/Generate Java script for fuzzing in Burp。

JNDI-Injection-Exploit. JNDI注入测试工具改版（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

burpJsEncrypter. More Easier Burp Extension To Solve Javascript Front End Encryption,一款更易使用的解决前端加密问题的Burp插件。

dnscat2. 去除了流量特征的UDP协议跨平台机器管理工具

Loki-bot. 多功能Windows机器运维管理工具

xlogger. Log all keyboard and terminal input/output for any app 记录任意程序的键盘输入和终端输入输出

FileDownloadServer. 一个可以查看文件传输进度的Web项目

TheKingOfDuck. TheKingOfDuck

captcha-killer. burp验证码识别接口调用插件

Chat2DB. 🔥 🔥 🔥 An intelligent and versatile general-purpose SQL client and reporting tool for databases which integrates ChatGPT capabilities.(智能的通用数据库SQL客户端和报表工具)

thekingofduck.github.io. myBlog

Inspeckage. Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

homeplay. 将非智能音响接入 HomeKit的技术方案

Pake. 🤱🏻 Turn any webpage into a desktop app with Rust. 🤱🏻 利用 Rust 轻松构建轻量级多端桌面应用

evilreplay. Seamless remote browser session control

packet-agent. A toolset for network packet capture in Cloud/Kubernetes and Virtualized environment.

hetty. Hetty is an HTTP toolkit for security research.

xserviceaccount. find serviceaccount in k8s node