adminnano
Follow
Stars
目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查
🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。
WannaCry_HTA 是一个基于 HTA（HTML Application）技术开发的高度仿真 WannaCry 勒索病毒界面模拟程序。该项目简单、完全可控，专为安全研究、应急演练和安全教育场景设计。界面UI参考zR00t1师傅项目编写。
Web Fuzzing Box - Web 模糊测试字典与一些Payloads
MaR - Matcher and Replacer, Perform intelligent replacement based on precise matching.
CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.
HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.
deadpool代理池工具，可从hunter、quake、fofa等网络空间测绘平台取高质量socks5代理，或本地导入socks5代理，轮询使用代理进行流量转发。
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
A curated list of awesome privilege escalation
Audit and pentest methodologies for Linux including internal enumeration, privesc, lateral movement, etc.
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.
全网首发！！！最全的网安面试题附参考答案（涵盖护网、红队、逆向、密码学、二进制、AI、区块链）
TestNet资产管理系统（资产管理|信息收集|暴露面管理|子域名扫描|C段扫描|端口扫描|漏洞扫描|Hunter|Fofa）
漏洞挖掘神器 | 浏览器插件 | 发现页面和JS中的隐藏接口和敏感信息、URL批量打开 & Vulnerability Mining Tool | Browser Plugin | Discover Hidden Interfaces, Sensitive Information in Pages and JS, Open Multiple URLs | Notepad
Kunyu, more efficient corporate asset collection
一个用于处理fsacn输出结果的图形化工具（尤其面对大量资产的fscan扫描结果做输出优化，让你打点快人五步！！！）
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems
WeChatOpenDevTool 微信小程序强制开启开发者工具
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter