sitedorks

想要获取最新更新？ 请务必 ⭐ 这个仓库！ ⭐ 现在也可用，Sitedorks Web ⭐ 关于 SiteDorks 使用 Google、Bing、Brave、Ecosia、Yahoo 或 Yandex 搜索带有多个网站的关键词。已提供默认的列表，其中包含 Moltbook、Grok、Github、Gitlab、Surveymonkey、Trello 等。目前，默认列表包含 635 个可用于 Dork 的网站。 默认情况下，文件中包含以下类别： ai 6 analysis 13 cloud 105 comm 83 ddns 3 dev 69 docs 80 edu 13 events 1...

awesome-osint

Awesome OSINT A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence OSINT is intelligence collected from publicly available sources. In the intelligence community IC, the term "open" refers to overt, publicly available sources as opposed to...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

awesome-hacker-search-engines

Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General • Servers • Vulnerabilities • Exploits • Attack surface • Code • Email addresses • Domains • URLs • DNS •...

Payload-and-Polyglot-Lists

Listas de Payloads y Políglotas ¿Encontraste un payload que no funciona? Por favor abre un issue con el payload, el contexto objetivo y lo que esperabas que sucediera. Las solicitudes de extracción con correcciones o nuevos payloads siempre son bienvenidas. La investigación está en curso. Este...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

TInjA

TInjA – 模板注入分析器 TInjA 是一款用于测试网页是否存在模板注入 漏洞的 CLI 工具。 它支持八种不同编程语言中的 44 个最相关的模板引擎 （截至 2023 年 9 月）。 TInjA 由 Hackmanit 和 Maximilian Hildebrand 开发。 功能 支持的模板引擎 安装 选项 1：预编译二进制文件 选项 2：使用 Go 安装 用法 指定标头、Cookie 和 POST 体 在 SSTI 之外扫描 CSTI 生成 JSONL 报告 使用代理 设置速率限制 故障排除 待办事项 背景信息 许可证 功能 自动检测模板注入可能性并识别正在使用的模板引擎。 支...

Gotenberg - Command Injection

Gotenberg 8.31.0 contains a command injection caused by lack of validation on JSON metadata keys in /forms/pdfengines/metadata/write endpoint, letting unauthenticated attackers execute OS commands, exploit requires crafted HTTP request. id: CVE-2026-42589 info: name: Gotenberg - Command Injection...

fuzzilli

Fuzzilli 一个基于自定义中间语言（"FuzzIL"）的（基于覆盖率的）动态语言解释器引导式模糊测试器，该中间语言可以被变异并翻译成JavaScript。 使用方法 使用此模糊测试器的基本步骤如下： 1. 下载其中一个受支持的JavaScript引擎的源代码。参见 Targets/ 目录，了解受支持的JavaScript引擎列表。 2. 应用目标目录中相应的补丁。同时请阅读该目录中的 README.md。 3. 使用覆盖率检测编译引擎（需要 clang = 4.0），如 README 中所述。 4. 编译模糊测试器：swift build -c release。 5...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

ofrak

OFRAK OFRAK（Open Firmware Reverse Analysis Konsole）是一个二进制分析与修改平台。OFRAK 结合了以下能力： 识别 与解包 多种二进制格式 分析 经充分测试的逆向工程工具解包后的二进制文件 修改 与重新打包 采用强大补丁策略的二进制文件 OFRAK 支持一系列嵌入式固件文件格式，不仅限于用户空间可执行文件，还包括： 压缩文件系统 压缩及带校验的固件 引导加载程序 RTOS/操作系统内核 OFRAK 为用户提供： 图形用户界面（GUI） ，用于交互式探索和可视化二进制文件 Python API...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs Title| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md CVE-2022-25451|...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...

fses

fses Fucking Search Engines Scraper - python library to scrap url's from search engines Search Engines we scrap Ask Bing DuckDuck GO UOL Yahoo Install git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt Usage Simple search using Ask from searchEngines.ask...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

Sublist3r

关于 Sublist3r Sublist3r 是一款使用 OSINT 枚举网站子域名的 Python 工具。它帮助渗透测试人员和漏洞猎人收集目标域名的子域名。Sublist3r 使用多种搜索引擎进行子域名枚举，例如 Google、Yahoo、Bing、Baidu 和 Ask。Sublist3r 还利用 Netcraft、Virustotal、ThreatCrowd、DNSdumpster 和 ReverseDNS 进行子域名枚举。 subbrute 已集成到 Sublist3r 中，通过使用改进的字典进行暴力破解，增加了发现更多子域名的可能性。感谢 subbrute 的作者 TheRoo...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: dive or you can dive with Docker directly: alias dive="docker run -ti --rm -v...

btr

Artefactos de Branch Target Reuse BTR Este repositorio contiene los artefactos para el artículo "Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries" aceptado en ACM CCS 2026. Para más información sobre el ataque BTR, consulta nuestra página del...