xl7dev

WebShell. Webshell && Backdoor Collection

BurpSuite. BurpSuite using the document and some extensions

ICSecurity. Industrial control Security Tool

Exploit. Python

bypass. weak password generation

PowerShell. Powershell hacking

pdns. PDNS Monitors network for malicious activities domain

SecTools. Python

xl7dev.github.io. it's my blog

LaZagne. Credentials recovery project

Crawlspider. Crawlspider via Scrapy

subdomain. Shell

LastRSS. Last RSS Simple yet powerful PHP RSS parser

Java-Deserialization-Cheat-Sheet. The cheat sheet about Java Deserialization vulnerabilities

EQGRP_Lost_in_Translation. Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

acefile. POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

yeti. Your Everyday Threat Intelligence

onionshare. Securely and anonymously share a file of any size

proxyflow. Passive agent Via mitmproxy

EQGRP. Decrypted content of eqgrp-auction-file.tar.xz

Wechatdump. Fetch Wechat Contacts via wechat web

Webscreenshots. screenshot tool via selenium chrome headless

weiboqrlogin. Python

scripts. scripts

flexidie. Source code and binaries of FlexiSpy from the Flexidie dump

TBMonitor. Baidu tieba Monitor

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

lynis. Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

NoEye. A blind mode exploit framework (a dns server and a web app) that like wvs's AcuMonitor Service or burpsuite's collabrator or cloudeye

ImageDownload. spider wooyun image

CScriptShell. CScriptShell, a Powershell Host running within cscript.exe