whw1sfb

JDumpSpider. HeapDump敏感信息提取工具

BurpCrypto. BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

Log4j2Scan. Log4j2 RCE Passive Scanner plugin for BurpSuite

ViewState-Cracker. ASP.net ViewState密钥被动扫描爆破BurpSuite插件

cve-2022-22947-godzilla-memshell. CVE-2022-22947 注入Godzilla内存马

SpringSpider. Spring Actuator端点的BurpSuite被动扫描插件。

pty_bind_shell. Pty bind shell for golang 一款基于SSH协议的远控程序

CVE-2021-22205. CVE-2021-22205 Gitlab 未授权远程代码执行漏洞 EXP, 移除了对djvumake & djvulibre的依赖，可在win平台使用

BurpCrypto-JsLibrary. BurpCrypto officially confirms the supported JS library (BurpCrypto官方确认支持的JS库).

ExploitDBHelper. ExploitDB toolkit ExploitDB辅助工具

SwaggerHelper. 用于启动本地保存的api-docs.json文档。

CryptoWatcher. 一个简单的虚拟货币盯盘程序，行情数据来源于火币交易所。

RandomIDCard. 随机身份证号码生成器

agentcrack. 不那么一样的 Java Agent 内存马

BurpSuite-collections. 有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

telegram_media_downloader. Download media files from a telegram conversation/chat/channel

hscan. 用于网站状况检测、通知的脚本。

HLSpider. 基于Scrapy的页面敏感词检测工具

log4j-payload-generator. Log4j jndi injects the Payload generator

jar-analyzer. Jar Analyzer - 一个JAR包分析工具，批量分析搜索，方法调用关系搜索，字符串搜索，Spring分析，CFG分析，JVM Stack Frame分析等众多功能

viewgen. Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

anti-portscan. 使用 iptables 防止端口扫描

dnslog-2. dnslog dns / dns rebinding platform

F-Scrack. 一款python编写的轻量级弱口令检测脚本，目前支持以下服务：FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。

CDK. CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

onedev. Super Easy All-In-One DevOps Platform

goby_poc. goby poc or exp,分享goby最新网络安全漏洞检测或利用代码

revsuit. RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

frp. A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.