st2-046-poc CVE-2017-5638

Password lists obtained from strangers attempting to log in to my server.

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

A CVE-2016-5195 exploit example.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。

a new spider based on python with more function including Network fingerprint search

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy

browser_vuln_check ,利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等..

An online request replication tool, also a tcp stream replay tool, fit for real testing, performance testing, stability testing, stress testing, load testing, smoke testing, etc

一个fuzzdb扩展库

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

Cobra（眼镜蛇） - static code security scan & analyse (白盒- 代码安全审计系统)

各种漏洞poc、Exp的收集或编写

Platform to host Capture the Flag competitions

Generates permutations, alterations and mutations of subdomains and then resolves them

Hubble's Auditing System

HT-WPS Breaker (High Touch WPS Breaker)

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into account…

Will to be a niubility scan-framework

lua waf,nginx+lua,openresty,luajit,waf+,cdn,nginx

poc from bugscan beebeeto

WEB渗透测试数据库

利用XSS入侵内网(Use XSS automation Invade intranet)

Web-based Source Code Vulnerability Scanner

BSoD PoC for CVE-2016-0051 (MS-016)

Reverse TCP Port to UDP Forwarding Tools

SSH to WebSockets Bridge