Log4j2 RCE Passive Scanner plugin for BurpSuite

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

Across the Great Wall we can reach every corner in the world

Run Async Shell Commands in Vim 8.0 / NeoVim and Output to Quickfix Window

Web Pentesting Fuzz 字典,一个就够了。

Common php webshells. Do not host the file(s) on your server!

BadUSB Teensy downexec exploit support Windows & Linux / Windows Cmd & PowerShell addUser exploit

CMDB 配置管理系统 资产管理系统

🏡 Open source home automation that puts local control and privacy first

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Python programming language

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

HTTP/HTTPS proxy in a single python script

The world's simplest facial recognition api for Python and the command line

Payloads for CRLF Injection