DC3x6
Follow
Stars
NSmartProxy是一款开源的内网穿透工具。采用.NET CORE的全异步模式打造。(NSmartProxy is an open source reverse proxy tool that creates a secure tunnel from a public endpoint to a locally service.)
FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.
Modern. Native. Delightful Web Debugging Proxy for macOS, iOS, and Android ⚡️
Playwright for Go a browser automation library to control Chromium, Firefox and WebKit with a single API.
ICP备案查询，从工业和信息化部政务服务平台抓取实时数据，提供本地API，自动过验证码，支持Web、APP、小程序、快应用名称查询，违法违规应用查询，支持根据备案号查询，支持根据企业名称查询
Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
A cross-platform and extendable version manager with support for Java, Node.js, Flutter, .Net & more
弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、等保模拟定级、自动化运维、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具、键盘记录器
Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入
基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）
sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件
Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.
Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。
A comprehensive, efficient, and reusable util function library of Go.
一个能够利用MSSQL的xp_cmdshell功能来进行流量代理的脚本，用于在站酷分离且不出网SQL注入进行代理
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems