A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Automatic SQL injection and database takeover tool

Impacket is a collection of Python classes for working with network protocols.

网易云音乐命令行版本

Web application fuzzer

Open Source Vulnerability Management Platform

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

trying to be a robust, user-friendly and hackable music player

Beginners book on Python - start here if you don't know programming

Python character encoding detector

Part of my daily plan for studying Python.

Python3编写的CMS漏洞检测框架

Python2编写的struts2漏洞全版本检测和利用工具

Docker security analysis & hacking tools

Software to identify the different types of hashes -

Subdomain enumeration and information gathering tool

Vulnerability Labs for security analysis

hack tools

Automatic bypass (brute force) waf

Collection of Proof of Concepts and Potential Targets for #ShellShocker

CMS渗透测试框架-A CMS Exploit Framework

1st Edition of Elegant SciPy (O'Reilly Publishers)

proxying and recording HTTP/HTTPs/Socks5 proxy flow, save to MYSQL database.

微信-树莓派-网易云音乐

Extended Differential Fuzzing Framework

Seebug、structs、cve漏洞实时监控推送系统🔦

Beehive is an open-source vulnerability detection framework based on Beebeeto-framework. Security researcher can use it to find vulnerability, exploits, subsequent attacks, etc.