r00tuser

ActuatorExploitTools. 一款用于攻击spring boot actuator的集成环境，目前集成三种攻击方式，支持1.x、2.x

SerializationDumper-Shiro. 基于SerializationDumper的Shiro Cookie序列化数据解密小工具

xianzhi_xss. 阿里云先知社区xss挑战

JwtDeCompress. 解压缩由jjwt库压缩的jwt token，便于查看jwt token中的数据

PassiveFTP. FTP passive mode send evil payload tool, support fastcgi and redis payload (generate by gopherus)

PrintNightmare. C

crt_go. A fast subdomain discovery tool based on the Certificate Transparency logs from crt.sh.

realIP. 一个高效的命令行工具，用于筛选目标真实使用IP。

awesome-pentest-cheat-sheets. Collection of the cheat sheets useful for pentesting