GraphSpy

GraphSpy / / by RedByte1337 / / / / | | / / / \ \ \ \ \ | | \ \ \ \ | | \ \ \ | / | | | \ / \ | \ | \ /| | | /|| / / / | / /|| / /|| / Índice GraphSpy Índice Inicio Rápido Instalación Ejecución Uso Características Notas de la Versión Próximas Características Patrocinadores Créditos...

spider

Spider El rastreador y extractor de datos web más rápido para Rust. spider.cloud · Guías · Docs · Ejemplos · Discord Spider es un motor de rastreo con enfoque principal en la concurrencia, escrito en Rust. Transmite páginas a medida que llegan, renderiza JavaScript únicamente en las páginas que l...

wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...

IIS-Backdoor

IIS-Backdoor 在本文中，我将解释如何为微软 Internet 信息服务（IIS）设计一个 rootkit。问题是：为什么要在 Web 服务器中植入后门？ 首先，一个显而易见但无用的答案：因为我们可以。 好吧，让我们给出一个更聪明的答案。在 Web 服务器中植入后门的目的有两个： 它允许攻击者访问客户端发送的数据。例如，如果网站受密码保护，我们可以获取此密码。 它允许动态地对服务器发送给 Web 客户端的任何内容进行后门操作。 第二点尤其有趣，因为它允许攻击者根据请求网页的 Web 浏览器注入适当的漏洞，或者感染从服务器下载的可执行文件。 IIS 后门 什么是 IIS IIS...

CVE-2022-37042

CVE-2022-37042 Zimbra CVE-2022-37042 Nuclei weaponized template shell path: /public/formatter.jsp Nuclei itself: https://github.com/projectdiscovery/nuclei shell have hidden input with 0 opacity, so just hover mouse over it, type command, then press Enter key: example shell url:...

erebus

Fast and customisable parameter based vulnerability scanner based on simple YAML Rules How • Install • Templates • Interceptor • Usage • Join Discord Erebus is used to test every parameter across targets based on Yaml templates leading to zero false positives and providing fast scanning on large...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

CaddySmith

CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...

firecrawl-mcp-server

Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl to MCP-compatible AI agents — search, scrape, and interact with the live web for clean, agent-ready context. Big thanks to @vrknetha, @knacklabs for the initial implementation! Features Search the web and get full page...

WebGoat

WebGoat: Una aplicación web deliberadamente insegura Introducción WebGoat es una aplicación web deliberadamente insegura mantenida por OWASP diseñada para enseñar lecciones de seguridad en aplicaciones web. Este programa es una demostración de fallos comunes en aplicaciones del lado del servidor...

dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: pip-rating badge .. image::...

InstagramMutualFollowerChecker

Instagram Mutual Followers Checker A Node.js/Express web application that checks for mutual followers between 2 or more Instagram accounts by scraping their followers data. Features ✅ Check mutual followers between multiple Instagram accounts ✅ Works with public Instagram accounts and private...

CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 是一个方便的Python脚本，提供了一种快速有效的方式来利用Microsoft RTF RCE。它可以生成恶意RTF文件，并在无需复杂配置的情况下向受害者传递metasploit / meterpreter载荷。 发布说明： 为脚本引入了以下功能： 使用工具包生成恶意RTF文件 以微型HTA + Web服务器模式运行工具包进行利用 版本: Python 2.7.13 示例： 步骤1：使用以下命令生成恶意RTF文件并发送给受害者 语法： python...

payloads

payloads Git All the Payloads! Una colección de payloads de ataques web. ¡Las pull requests son bienvenidas! Uso ejecuta ./get.sh para descargar payloads externos y descomprimir cualquier archivo de payload que esté comprimido. Créditos de payloads fuzzdb - https://github.com/fuzzdb-project/fuzzd...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

pidrila

PIDRILA 当前版本：v0.1.0 2020.11.08 概述 PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer 是由 BrightSearch 团队为所有道德网络追踪者开发的一款极速异步 Web 路径扫描器原型。 安装与使用 git clone https://github.com/enemy-submarine/pidrila.git cd pidrila python3 pidrila.py -u 选项 Usage: pidrila.py OPTIONS...

reconspider

最先进的开源情报（OSINT）框架 ReconSpider ReconSpider 是最先进的开源情报（OSINT）框架，用于扫描 IP 地址、电子邮件、网站、组织，并从不同来源获取信息。 ReconSpider 可供信息安全研究人员、渗透测试人员、漏洞猎手和网络犯罪调查人员使用，以深入挖掘目标信息。 ReconSpider 聚合所有原始数据，在仪表板上可视化，并支持基于数据的告警和监控。 ReconSpider 还结合了 Wave、Photon 和 Recon Dog 的功能，以全面枚举攻击面。 为什么叫 ReconSpider？ ReconSpider = Recon + Spide...

PentestBro

Description Experimental tool for Windows. PentestBro combines subdomain scans, whois, port scanning, banner grabbing and web enumeration into one tool. Uses subdomain list of SecLists. Uses nmap service probes for banner grabbing. Uses list of paths for web enumeration. Example scan of...

subcrawl

SubCrawl SubCrawl 是一个由 HP Inc. 威胁研究 团队的 Patrick Schläpfer、Josh Stroschein 和 Alex Holland 开发的框架。SubCrawl 旨在发现、扫描和分析开放目录。该框架采用模块化设计，由四个组件构成：输入模块、处理模块、输出模块和核心爬虫引擎。URL 是主要的输入值，框架会解析这些 URL 并将其添加到队列系统中，然后再进行爬取。URL 的解析是重要的第一步，它会以一个提交的 URL 为基础，通过逐级移除子目录生成额外的待爬取 URL，直至没有子目录剩余。这个过程确保了对 Web...