iqiqiya

xray_crack. xray高级版本破解通用启动器

bilibili-parse. bilibili Video API

blutter. Flutter Mobile Application Reverse Engineering Tool

ProxyBridge. Proxifier Alternative to redirect any Windows/MacOS/Linux TCP and UDP traffic to HTTP/Socks5 proxy

meilisearch. A lightning-fast search engine API bringing AI-powered hybrid search to your sites and applications.

JoySafety. JoySafety

NucleiScanner. NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

Skr_Learning. 天问之路 - 学习笔记&学习周报。内容包括但不限于C++ STL、编译原理、LLVM IR Pass代码优化、CSAPP Lab、uCore操作系统等等。

oneindex. Onedrive Directory Index 修复bug

mitan. 密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、sesionkey加解密、批量信息权重查询、密码字典等功能

fine. 网络空间资产测绘、ICP备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。

apkleaks. Scanning APK file for URIs, endpoints & secrets.

log4j-shell-poc. A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

aliyun-accesskey-Tools. 阿里云accesskey利用工具

MobileSec. 记录一些我自己在学习Android逆向过程中的有意思的东西

getJS. A tool to fastly get all javascript sources/files

jsmon. a javascript change monitoring tool for bugbounties

Dictionary-Of-Pentesting. Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

BurpSuite-collections. 有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

xss-receiver. 简单易用的 xss 接收平台 + payload 管理平台

w12scan. 🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

weblogger. 针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具

cowrie. Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

IoT-vulhub. IoT固件漏洞复现环境

r6300v2. Netgear R6300v2 source

KingOfBugBountyTips. Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

Information_Collection_Handbook. Handbook of information collection for penetration testing and src

django-rat-corona. Remote Administration Tool / Botnet implemented with Django. This is for educational purposes only!

acme.sh. A pure Unix shell script ACME client for SSL / TLS certificate automation

RevokeMsgPatcher. :trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）

spy-debugger. 微信调试，各种WebView样式调试、手机浏览器的页面真机调试。便捷的远程调试手机页面、抓包工具，支持：HTTP/HTTPS，无需USB连接设备。

marshalsec. Java

myscan. myscan 被动扫描

Packer-Fuzzer. Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

AES-Killer. Burp Plugin to decrypt AES encrypted traffic on the fly

fuzzDicts. You Know, For WEB Fuzzing !

BurpCollector. 通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。

Scanners-Box. A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

DefaultCreds-cheat-sheet. One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

burpFakeIP. 服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

sec-dev-in-action-src. 《白帽子安全开发实战》配套代码

blackhat-go. As hackers, we put a premium on function over elegance as time is always scarce. When you need to quickly create a solution to a problem, style concerns come secondary.

xssValidator. This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

BurpSuite_403Bypasser. Burpsuite Extension to bypass 403 restricted directory

broken-link-checker. Find broken links, missing images, etc within your HTML.

ffuf. Fast web fuzzer written in Go

osmedeus. A Modern Orchestration Engine for Security

hakrawler. Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

ShodanIsh. Shodan Favicon Hash Generator By Aziz Hakim @eternyle

ParamSpider. Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

ksubdomain. 无状态子域名爆破工具

assetfinder. Find domains and subdomains related to a given domain

Windows-Exploit-Suggester. This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

MovieHeavens. 🎬 基于Pyqt5的简单电影搜索工具

hetty. An HTTP toolkit for security research.

ICS_IoT_Shodan_Dorks.

vulnerability-list. 在渗透测试中快速检测常见中间件、组件的高危漏洞。

objection. 📱 objection - runtime mobile exploration

httpx. httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

subfinder. Fast passive subdomain enumeration tool.

Automator. ⌨ Digispark™ Rubber Ducky code editor for Windows.

urh. Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

proxy_pool. Python ProxyPool for web spider

hangzhou_house_knowledge. 2017年买房经历总结出来的买房购房知识分享给大家，希望对大家有所帮助。买房不易，且买且珍惜。Sharing the knowledge of buy an own house that according to the experience at hangzhou in 2017 to all the people. It's not easy to buy a own house, so I hope that it would be useful to everyone.

AUTO-EARN. 一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

attifyos. Attify OS - Distro for pentesting IoT devices

365-days-get-xuanwulab-job. Get a job from Xuanwu Lab in 365 days

WIFIADB. Connect adb from devices to androidstudio by wifi without usb anymore

XposedAppium. 基于Xposed自动化框架

Penetration_Testing_POC. 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

frida-all-in-one. 《FRIDA操作手册》by @hluwa @r0ysue

CryptoFucker. A xposed plugin for intercepting crypto parameters from apk files.

MagiskFrida. Runs frida-server on boot as root with magisk.

lxhToolHTTPDecrypt. Simple Android/iOS protocol analysis and utilization tool

XServer. A Xposed Module for Android Penetration Test, with NanoHttpd.

try_decodings. Try several decodings on a string or file.

LinEnum. Scripted Local Linux Enumeration & Privilege Escalation Checks

vulhub. Pre-Built Vulnerable Environments Based on Docker-Compose

funwithmodbus0x5a. Material from my ICS Village talk at DEFCON 25

hexo-images-watermark. 新版移动至新仓库，地址：https://github.com/SpiritLingPub/hexo-images-watermark

KMS-Server-WebUI. KMS activation server and generate onekey activation script on website(一键生成KMS激活脚本)

gobuster. Directory/File, DNS and VHost busting tool written in Go

DVWA. Damn Vulnerable Web Application (DVWA)

icsmaster. ICS/SCADA Security Resource（整合工控安全相关资源）

SpringBootVulExploit. SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

hexo-blog-encrypt. Yet, just another hexo plugin for security.

fuzzdb. Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

wfuzz. Web application fuzzer

ApkAnalyser. Java

POC-T. 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

isf. ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

wooyun_public. This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

OneForAll. OneForAll是一款功能强大的子域收集工具

xray. 一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

GitHack. A `.git` folder disclosure exploit

nikto. Nikto web server scanner

ds_store_exp. A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

typecho-theme-apollo. A minimalism typecho theme.

frida-dexdump. A frida tool to dump dex in memory to support security engineers analyzing malware.

DefinitelyTyped. The repository for high quality TypeScript type definitions.

h-player-v2. 资源采集站在线播放

Bob. Bob 是一款 macOS 平台的翻译和 OCR 软件。

CPWechatXposed. 使用Xposed Hook微信等APP

study_Xposed. xpoesd 教程

AndroidSecurityStudy. 安卓应用安全学习

URP_Spider. UPR 教务系统信息收集工具（爬虫）

Frida-Apk-Unpack. JavaScript

BlockSecureFlag. BlockSecureFlag

vdexExtractor. Tool to decompile & extract Android Dex bytecode from Vdex files

SwipeMenuListView. [DEPRECATED] A swipe menu for ListView.

SwipeRecyclerView. :melon: RecyclerView侧滑菜单，Item拖拽，滑动删除Item，自动加载更多，HeaderView，FooterView，Item分组黏贴。

XposedHook. 免重启Xposed模块改进

fastjson. FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.

xLog. Android logger, pretty, powerful and flexible, log to everywhere, save to file, all you want is here.

Android-Bootstrap. Bootstrap style widgets for Android, with Glyph Icons

StatusBarCompat. Status Bar Utils ---- Change Status Bar Mode Simply

xUtils3. Android orm, bitmap, http, view inject...

JZVideo. 高度自定义的安卓视频框架 MediaPlayer exoplayer ijkplayer ffmpeg

DKVideoPlayer. Android Video Player. 安卓视频播放器，封装MediaPlayer、ExoPlayer、IjkPlayer。模仿抖音并实现预加载，列表播放，悬浮播放，广告播放，弹幕，视频水印，视频滤镜

you-get. :arrow_double_down: Dumb downloader that scrapes the web

Struts2-Scan. Struts2全漏洞扫描利用工具

trackerslist. Updated list of public BitTorrent trackers

QueryList. :spider: The progressive PHP crawler framework! 优雅的渐进式PHP采集框架。

XposedSmsCode. :lollipop: An Xposed Module which can recognize, parse verification code and copy it to clipboard when a new message arrives . / 识别短信验证码的Xposed模块，并将验证码拷贝到剪切板。

ClipMgr. 不要再强x我的剪贴板了！

WeiJu. 提供大量自定义功能的聚合xposed工具

py12306. 🚂 12306 购票助手，支持集群，多账号，多任务购票以及 Web 页面管理

Behinder. “冰蝎”动态二进制加密网站管理客户端

Akina-for-Typecho. Akina for Typecho 主题模板

iAkieHook. 适配酷我音乐v9.2.5.0免VIP

reGeorg. The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Luyten. An Open Source Java Decompiler Gui for Procyon

flv.js. HTML5 FLV Player

Login_Test. 写一个简单的登陆界面APP

Tencent_cloud_sms. php接入腾讯云短信服务 PHP access to Tencent cloud short message service

iqiqiya_ImageThumbnail. PHP generates thumbnail items(使用php将图片生成缩略图)

Web-Security-Learning. Web-Security-Learning

Bilibili_Up_Live_Reminder. Bilibili Up Live Real-time Reminder by email(哔哩哔哩up主直播发邮件实时提醒)

MoeQuest. The meizi of a material design style welfare App.

iqiqiya_WaterMark. Text Watermarking and Picture Watermarking Projects(文字水印和图片水印项目)

miniProxy. 🚨⚠️ UNMAINTAINED! ⚠️🚨 A simple PHP web proxy.

opengapps. The main repository of the Open GApps Project

De1CTF2019. De1CTF2019

Unblock163MusicClient-Xposed. Unblock 163 Cloud Music Android client through Xposed.

The-Hacker-Playbook-3-Translation. 对 The Hacker Playbook 3 的翻译。

Moments_reminder. 一个xposed模块，自动定时刷新朋友圈，当关注的特定好友发布新朋友圈时会弹出提示

GM_script. 我就是来分享脚本玩玩的

subDomainsBrute. A fast sub domain brute tool for pentesters

htpwdScan. HTTP weak pass scanner

CTF-All-In-One. CTF竞赛权威指南

Blasting_dictionary. 爆破字典

ROP_STEP_BY_STEP. 一步一步学ROP

tutorials. 机器学习相关教程

ctf-tools. Some setup scripts for security research tools.

pikachu. 一个好玩的Web安全-漏洞测试平台

BlindWaterMark. 盲水印 by python

CTF-Mobile-Tutorial. Mobile CTF Solutions

ghidra. Ghidra is a software reverse engineering (SRE) framework

iqiqiya-API. API接口大全不断更新中~欢迎Fork和Star(✎ 1.一言(古诗句版)api ✎ 2.必应每日一图api ✎ 3.在线ip查询 ✎ 4.m3u8视频在线解析api ✎ 5.随机生成二次元图片api ✎ 6.快递查询api-支持国内百家快递 ✎ 7.flv视频在线解析api ✎ 8.抖音视频无水印解析api✎ 9.一句话随机图片api✎ 10.QQ用户信息获取api✎11.哔哩哔哩封面图获取api✎12.千图网58pic无水印解析下载api✎13.喜马拉雅主播FM数据采集api✎14.网易云音乐api✎15.CCTV央视网视频解析api✎16.微信运动刷步数api✎17.皮皮搞笑APP短视频无水印解析api✎18.皮皮虾短视频去水印解析✎19.蓝奏云直链解析✎20.千库网无水印解析✎21.17素材网免VIP解析✎22.快手短视频去水印解析✎23.微视短视频去水印解析)

live2d-widget-models. Model library for live2d-widget.js

Meting. :cake: Wow, such a powerful music API framework

MenuTree. Typecho 插件 自动生成文章目录树 原作者:Melon 原版本:0.1.0

Typecho-Theme-Aria. Typecho Theme Aria - 书写自己的篇章