RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Repository Index
76,855 visible repositories in the index
289–312 of 530 · Most stars
Passive Security Scanner (被动式安全扫描器)
- security-tools
- passive-vulnerability-scanner
NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques
- nuclei
- nuclei-templates
- fuzzing-templates
- nucleifuzzer
一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
- dingding-bot
- vulnerability
- vulnerability-analysis
- lark-bot
Web vulnerability scanner written in Python3
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Doom 3 BFG Edition source port with updated DX12 / Vulkan renderer and modern game engine features
- doom3
- pbr
- 64-bit
- modding
For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
- vulnerability-detection
- vulnerability-research
- bugbounty
- pentesting
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
- web
- application
- scanner
- osint
Rust Bindings for the Skia Graphics Library
一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
Vulkan & C++17 based Scene Graph Project
- vulkan
- cpp17
- cppcoreguidelines
- best-practices
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
- ai-security
- bug-bounty
- claude
- ctf
Awesome Pentest Tools Collection
- pentest-tool
- vulnerability-scanners
- exploitation
- command-injection
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
- bugbounty
- burp-extensions
- burpsuite
- bug-bounty
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
- graphql
- security-scanner
- graphql-security
- api-documentation-tool
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
Checklist of security precautions for Ruby on Rails applications.
- ruby
- ruby-on-rails
- rails
- security
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
《深入理解CodeQL》Finding vulnerabilities with CodeQL.
- 0e0w
- codeql
- hackjava
- hackaspx
safely install npm packages by auditing them pre-install stage
A Vulkan renderer written from scratch on stream
Vulkan/CUDA/HIP/OpenCL/Level Zero/Metal Fast Fourier Transform library
- vulkan
- fft
- convolution
- r2c