BlackArch-Tools

BlackArch是一个基于ArchLinux的发行版,专注于渗透测试和安全研究。它提供了大量的安全和黑客工具,用户可以通过添加存储库和从BlackArch仓库安装来集成这些工具到ArchLinux系统中。安装过程包括添加BlackArch存储库,然后使用包管理器进行安装。此外,还提供了一些替代安装方法以适应不同的需求。博客详细列举了BlackArch Linux完整的工具列表。

BlackArch-Tools

简介 安装在ArchLinux之上   添加存储库   从blackarch存储库安装工具   替代安装方法 BlackArch Linux Complete Tools List

简介

BlackArch Linux是针对渗透测试人员和安全研究人员的基于Arch Linux的渗透测试分发版。
BlackArch Linux预装有上千种专用工具以用于渗透测试和计算机取证分析。
BlackArch Linux与现有的Arch安装兼容。您可以单独或成组安装工具。 https://blackarch.org/downloads.html

安装在ArchLinux之上

添加存储库

BlackArch Linux与现有/普通Arch安装兼容。它充当非官方用户存储库。
下载脚本 > 验证 > 设置脚本可执行 > 运行安装脚本
#以root身份运行https://blackarch.org/strap.sh并按照说明操作。
$ curl -O https://blackarch.org/strap.sh
#SHA1总和应匹配:9f770789df3b7803105e5fbc19212889674cd503 strap.sh
$ sha1sum strap.sh
#设置执行位
$ chmod + x strap.sh
#运行strap.sh
$ sudo ./strap.sh

从blackarch存储库安装工具

#要列出所有可用工具,请运行
$ sudo pacman -Sgg | grep blackarch | cut -d' ' -f2 | sort -u
#要安装所有工具,请运行
$ sudo pacman -S blackarch
#要安装一类工具,请运行
$ sudo pacman -S blackarch-<category>
#要查看blackarch类别,请运行
$ sudo pacman -Sg | grep blackarch

替代安装方法

作为替代安装方法的一部分,您可以从源代码构建blackarch包。你可以在github上找到PKGBUILDs 。要构建整个仓库,您可以使用blackman工具。
#首先,你必须安装blackman。如果在您的计算机上设置了BlackArch软件包存储库, https://github.com/BlackArch/blackarch
#可以安装blackman,如:
$ sudo pacman -S blackman
#下载,编译和安装包:
$ sudo blackman -i <package>
#下载,编译和安装整个类别
$ sudo blackman -g <group>
#下载,编译和安装所有BlackArch工具
$ sudo blackman -a
#列出blackarch类别
$ blackman -l
#列出类别工具
$ blackman -p <category>
可以在此处找到BlackArch Linux存储库的完整工具列表。

BlackArch Linux Complete Tools List

https://blackarch.org/tools.html
Categorynolink类别NameDescription描述
  didier-stevens-suiteDidier Stevens Suite.迪迪埃史蒂文斯套房。
  python-yara-rednagaThe Python interface for YARA.YARA的Python界面。
anti-forensic反取证ropeadopeA linux log cleaner.一个linux日志清理器。
anti-forensic反取证secure-deleteSecure file, disk, swap, memory erasure utilities.安全文件,磁盘,交换,内存擦除实用程序。
anti-forensic反取证steghideEmbeds a message in a file by replacing some of the least significant bits通过替换一些最低有效位来在文件中嵌入消息
automation自动化apt2Automated penetration toolkit.自动渗透工具包。
automation自动化automatoShould help with automating some of the user-focused enumeration tasks during an internal penetration test.应该有助于在内部渗透测试期间自动执行一些以用户为中心的枚举任务。
automation自动化autonessusThis script communicates with the Nessus API in an attempt to help with automating scans.此脚本与Nessus API通信,以帮助自动执行扫描。
automation自动化autonseMassive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner.大规模NSE(Nmap脚本引擎)AutoSploit和AutoScanner。
automation自动化autopwnSpecify targets and run sets of tools against them.指定目标并针对它们运行工具集。
automation自动化autovpnEasily connect to a VPN in a country of your choice.轻松连接到您选择的国家/地区的VPN。
automation自动化awsbucketdumpA tool to quickly enumerate AWS S3 buckets to look for loot.一种快速枚举AWS S3存储桶以查找战利品的工具。
automation自动化bashfuscatorFully configurable and extendable Bash obfuscation framework.完全可配置和可扩展的Bash混淆框架。
automation自动化bluerangerA simple Bash script which uses Link Quality to locate Bluetooth device radios.一个简单的Bash脚本,它使用链接质量来定位蓝牙设备无线电。
automation自动化brutesprayBrute-Forcing from Nmap output - Automatically attempts default creds on found services.来自Nmap输出的强制执行 - 自动尝试找到的服务上的默认信用。
automation自动化brutexAutomatically brute force all services running on a target.自动暴力破坏目标上运行的所有服务。
automation自动化cewlA custom word list generator.自定义单词列表生成器。
automation自动化checksecTool designed to test which standard Linux OS and PaX security features are being used用于测试正在使用的标准Linux OS和PaX安全功能的工具
automation自动化cisco-snmp-enumerationAutomated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking.自动Cisco SNMP枚举,暴力破解,配置下载和密码破解。
automation自动化clusterdAutomates the fingerprinting, reconnaissance, and exploitation phases of an application server attack.自动化应用程序服务器攻击的指纹识别,侦察和利用阶段。
automation自动化crunchA wordlist generator for all combinations/permutations of a given character set.用于给定字符集的所有组合/排列的词列表生成器。
automation自动化deathstarAutomate getting Domain Admin using Empire.使用Empire自动获取域管理员。
automation自动化dracnmapTool to exploit the network and gathering information with nmap help.利用nmap帮助利用网络和收集信息的工具。
automation自动化dumb0A simple tool to dump users in popular forums and CMS.在流行的论坛和CMS中转储用户的简单工具。
automation自动化easy-credsA bash script that leverages ettercap and other tools to obtain credentials.一个bash脚本,它利用ettercap和其他工具来获取凭据。
automation自动化easydaEasy Windows Domain Access Script.简单的Windows域访问脚本。
automation自动化empireA PowerShell and Python post-exploitation agent.PowerShell和Python后期利用代理。
automation自动化findsploitFind exploits in local and online databases instantly.立即在本地和在线数据库中查找漏洞利用。
automation自动化fstealerAutomates file system mirroring through remote file disclosure vulnerabilities on Linux machines.通过Linux计算机上的远程文件泄露漏洞自动执行文件系统镜像。
automation自动化glueA framework for running a series of tools.用于运行一系列工具的框架。
automation自动化google-explorerGoogle mass exploit robot - Make a google search, and parse the results for a especific exploit you define.Google大规模攻击机器人 - 进行谷歌搜索,并解析结果以获得您定义的特定攻击。
automation自动化gooscanA tool that automates queries against Google search appliances, but with a twist.一种自动对Google搜索设备进行查询的工具,但有一点扭曲。
automation自动化hackershA shell for with Pythonect-like syntax, including wrappers for commonly used security tools.一个类似Pythonect语法的shell,包括常用安全工具的包装器。
automation自动化hate-crackA tool for automating cracking methodologies through Hashcat.一种通过Hashcat自动化破解方法的工具。
automation自动化intersectPost-exploitation framework后开发框架
automation自动化koadicA Windows post-exploitation rootkit similar to other penetration testing tools such as Meterpreter and Powershell Empire.Windows后开发rootkit,类似于其他渗透测试工具,如Meterpreter和Powershell Empire。
automation自动化ldapscriptsSimple shell scripts to handle POSIX entries in an LDAP directory.用于处理LDAP目录中的POSIX条目的简单shell脚本。
automation自动化linikatzTool to attack AD on UNIX.在UNIX上攻击AD的工具。
automation自动化linsetEvil Twin Attack Bash script - An automated WPA/WPA2 hacker.Evil Twin Attack Bash脚本 - 一个自动化的WPA / WPA2黑客。
automation自动化maskprocessorA High-Performance word generator with a per-position configurable charset.具有每位置可配置字符集的高性能字生成器。
automation自动化masscan-automationMasscan integrated with Shodan API.Masscan与Shodan API集成。
automation自动化massexpconsoleA collection of tools and exploits with a cli ui for mass exploitation.一系列工具和漏洞利用大量开发的cli ui。
automation自动化merlin-serverMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.Merlin是一个跨平台的后期开发HTTP / 2命令和控制服务器和用golang编写的代理。
automation自动化metasploit-autopwndb_autopwn plugin of metasploit.metasploit的db_autopwn插件。
automation自动化mitmap-oldShell Script for launching a Fake AP with karma functionality and launches ettercap for packet capture and traffic manipulation.用于启动具有karma功能的假AP的Shell脚本,并启动ettercap用于数据包捕获和流量操作。
automation自动化morpheusAutomated Ettercap TCP/IP Hijacking Tool.自动Ettercap TCP / IP劫持工具。
automation自动化msf-mpcMsfvenom payload creator.Msfvenom有效负载创建者。
automation自动化msfenumA Metasploit auto auxiliary script.Metasploit自动辅助脚本。
automation自动化mutatorThis project aims to be a wordlist mutator with hormones, which means that some mutations will be applied to the result of the ones that have been already done, resulting in something like: corporation -> C0rp0r4t10n_2012这个项目旨在成为一个激素的词表变异器,这意味着一些突变将应用于已经完成的变体的结果,导致类似于:公司 - > C0rp0r4t10n_2012
automation自动化nfspyA Python library for automating the falsification of NFS credentials when mounting an NFS share.一个Python库,用于在挂载NFS共享时自动伪造NFS凭据。
automation自动化nfsshellUserland NFS command tool.Userland NFS命令工具。
automation自动化nosqlattackPython tool to automate exploit MongoDB server IP on Internet anddisclose the database data by MongoDB default configuration weaknesses and injection attacks.Python工具可自动在Internet上利用MongoDB服务器IP,并通过MongoDB默认配置弱点和注入攻击来分发数据库数据。
automation自动化panopticA tool that automates the process of search and retrieval of content for common log and config files through LFI vulnerability.一种工具,可通过LFI漏洞自动搜索和检索常见日志和配置文件的内容。
automation自动化pastejackerHacking systems with the automation of PasteJacking attacks.使用PasteJacking攻击自动化黑客系统。
automation自动化pasv-agrsvPassive recon / OSINT automation script.被动侦察/ OSINT自动化脚本。
automation自动化penboxA Penetration Testing Framework - The Tool With All The Tools.渗透测试框架 - 所有工具的工具。
automation自动化pentmenuA bash script for recon and DOS attacks.用于侦察和DOS攻击的bash脚本。
automation自动化pinA dynamic binary instrumentation tool.动态二进制检测工具。
automation自动化portiaAutomate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.在低特权帐户遭到入侵后,自动执行通常在内部网络渗透测试中执行的许多技术。
automation自动化pupyOpensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python.Opensource,跨平台(Windows,Linux,OSX,Android)远程管理和后期开发工具,主要用python编写。
automation自动化purebloodA Penetration Testing Framework created for Hackers / Pentester / Bug Hunter.为Hackers / Pentester / Bug Hunter创建的渗透测试框架。
automation自动化regeorgThe successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.reDuh的继任者,pwn一个堡垒网络服务器并通过DMZ创建SOCKS代理。枢轴和pwn。
automation自动化rsmanglerrsmangler takes a wordlist and mangle itrsmangler采用了一个单词列表并对其进行了修改
automation自动化sakis3gAn all-in-one script for connecting with 3G.用于连接3G的一体化脚本。
automation自动化search13371337Day Online Exploit Scanner.1337Day Online Exploit Scanner。
automation自动化simple-duckyA payload generator.有效载荷发生器。
automation自动化sipviciousTools for auditing SIP devices用于审核SIP设备的工具
automation自动化sn00pA modular tool written in bourne shell and designed to chain and automate security tools and tests.一种用bourne shell编写的模块化工具,用于链接和自动化安全工具和测试。
automation自动化sn1perAutomated Pentest Recon Scanner.自动Pentest Recon扫描仪。
automation自动化sploitctlFetch, install and search exploit archives from exploit sites like exploit-db and packetstorm.从exploit-db和packetstorm等漏洞利用站点获取,安装和搜索漏洞档案。
automation自动化spookflareLoader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.具有多种功能的装载机,滴管发电机,用于绕过客户端和网络侧的对策。
automation自动化statsprocessorA high-performance word-generator based on per-position Markov-attack.基于每个位置马尔可夫攻击的高性能字生成器。
automation自动化thefatratTheFatRat a massive exploiting tool: easy tool to generate backdoor and easy tool to post exploitation attack.TheFatRat是一个庞大的开发工具:生成后门的简易工具和易于发布攻击的工具。
automation自动化tigerA security scanner, that checks computer for known problems. Can also use tripwire, aide and chkrootkit.安全扫描程序,用于检查计算机是否存在已知问题 也可以使用tripwire,aide和chkrootkit。
automation自动化tlssledA Linux shell script whose purpose is to evaluate the security of a target SSL/TLS (HTTPS) web server implementation.Linux shell脚本,其目的是评估目标SSL / TLS(HTTPS)Web服务器实现的安全性。
automation自动化torctlScript to redirect all traffic through tor network including dns queries for anonymizing entire system.脚本通过tor网络重定向所有流量,包括用于匿名整个系统的dns查询。
automation自动化unix-privesc-checkTries to find misconfigurations that could allow local unprivilged users to escalate privileges to other users or to access local apps (e.g. databases).试图找到可能允许本地未经授权的用户将权限升级到其他用户或访问本地应用程序(例如数据库)的错误配置。
automation自动化username-anarchyTools for generating usernames when penetration testing.渗透测试时生成用户名的工具。
automation自动化veilA tool designed to generate metasploit payloads that bypass common anti-virus solutions.一种工具,旨在生成绕过常见防病毒解决方案的metasploit有效负载。
automation自动化vlan-hoppingEasy 802.1Q VLAN Hopping轻松实现802.1Q VLAN跳频
automation自动化voiphopperA security validation tool that tests to see if a PC can mimic the behavior of an IP Phone. It rapidly automates a VLAN Hop into the Voice VLAN.一种安全验证工具,用于测试PC是否可以模仿IP电话的行为。它可以快速自动化VLAN跳入语音VLAN。
automation自动化wikigenA script to generate wordlists out of wikipedia pages.用于从维基百科页面生成单词列表的脚本。
automation自动化wnmapA shell script written with the purpose to automate and chain scans via nmap. You can run nmap with a custom mode written by user and create directories for every mode with the xml/nmap files inside.编写一个shell脚本,目的是通过nmap实现自动化和链式扫描。您可以使用用户编写的自定义模式运行nmap,并为每个模式创建目录,其中包含xml / nmap文件。
automobile汽车can-utilsLinux-CAN / SocketCAN user space applications.Linux-CAN / SocketCAN用户空间应用程序。
automobile汽车canalyzat0rSecurity analysis toolkit for proprietary car protocols.专有汽车协议的安全分析工具包。
automobile汽车cantoolzFramework for black-box CAN network analysis.黑盒CAN网络分析框架。
backdoor后门aesshellA backconnect shell for Windows and Unix written in python and uses AES in CBC mode in conjunction with HMAC-SHA256 for secure transport.一个用于Windows和Unix的反向连接shell,用python编写,在CBC模式下使用AES和HMAC-SHA256进行安全传输。
backdoor后门azazelA userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit.userland rootkit基于Jynx rootkit的原始LD_PRELOAD技术。
backdoor后门backcookieSmall backdoor using cookie.使用cookie的小后门。
backdoor后门backdoor-factoryPatch win32/64 binaries with shellcode.使用shellcode修补win32 / 64二进制文件。
backdoor后门backdoormeA powerful utility capable of backdooring Unix machines with a slew of backdoors.一个功能强大的实用程序,能够通过一系列后门来支持Unix机器。
backdoor后门backdoorpptTransform your payload.exe into one fake word doc (.ppt).将您的payload.exe转换为一个假单词doc(.ppt)。
backdoor后门cymothoaA stealth backdooring tool, that inject backdoor's shellcode into an existing process.一种隐形后门工具,可将后门的shellcode注入现有流程。
backdoor后门debinjectInject malicious code into *.debs.将恶意代码注入* .debs。
backdoor后门dr0p1t-frameworkA framework that creates a dropper that bypass most AVs, some sandboxes and have some tricks.一个框架,它创建一个绕过大多数AV,一些沙箱并有一些技巧的dropper。
backdoor后门dragon-backdoorA sniffing, non binding, reverse down/exec, portknocking service Based on cd00r.c.一个嗅探,非绑定,反向下行/执行,portknocking服务基于cd00r.c。
backdoor后门eggshelliOS/macOS/Linux Remote Administration Tool.iOS / macOS / Linux远程管理工具。
backdoor后门enyelkmRootkit for Linux x86 kernels v2.6.适用于Linux x86内核的Rootkit v2.6。
backdoor后门exe2imageA simple utility to convert EXE files to JPEG images and vice versa.将EXE文件转换为JPEG图像的简单实用程序,反之亦然。
backdoor后门gobdA Golang covert backdoor.一个Golang隐蔽的后门。
backdoor后门harnessInteractive remote PowerShell Payload.交互式远程PowerShell有效负载。
backdoor后门hotpatchHot patches executables on Linux using .so file injection.Linux上的热补丁可执行文件使用.so文件注入。
backdoor后门icmpshSimple reverse ICMP shell.简单的反向ICMP外壳。
backdoor后门jynx2An expansion of the original Jynx LD_PRELOAD rootkit原始Jynx LD_PRELOAD rootkit的扩展
backdoor后门kimiScript to generate malicious debian packages (debain trojans).用于生成恶意debian软件包的脚本(debain trojans)。
backdoor后门ld-shatnerld-linux code injector.ld-linux代码注入器。
backdoor后门metersshA way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection.一种获取shellcode的方法,将其注入内存然后通过SSH隧道传输您想要的任何端口,以将任何类型的通信屏蔽为正常的SSH连接。
backdoor后门microsploitFast and easy create backdoor office exploitation using module metasploit packet, Microsoft Office, Open Office, Macro attack, Buffer Overflow.使用模块metasploit数据包,Microsoft Office,Open Office,宏攻击,缓冲区溢出,快速轻松地创建后门办公室利用。
backdoor后门ms-sysA tool to write Win9x-.. master boot records (mbr) under linux - RTM!在linux下编写Win9x- ..主启动记录(mbr)的工具 - RTM!
backdoor后门nxcryptNXcrypt - python backdoor framework.NXcrypt - python后门框架。
backdoor后门phisheryAn SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector.具有Word文档模板URL注入器的SSL启用的基本身份验证凭据收集器。
backdoor后门pyrasiteCode injection and introspection of running Python processes.代码注入和运行Python进程的内省。
backdoor后门revshA reverse shell with terminal support, data tunneling, and advanced pivoting capabilities.具有终端支持,数据隧道和高级旋转功能的反向外壳。
backdoor后门rrsA reverse (connecting) remote shell. Instead of listening for incoming connections it will connect out to a listener (rrs in listen mode). With tty support and more.反向(连接)远程shell。它不会监听传入的连接,而是连接到监听器(侦听模式下的rrs)。有tty支持和更多。
backdoor后门rubilyn64bit Mac OS-X kernel rootkit that uses no hardcoded address to hook the BSD subsystem in all OS-X Lion & below. It uses a combination of syscall hooking and DKOM to hide activity on a host.64位Mac OS-X内核rootkit,它不使用硬编码地址来挂接所有OS-X Lion及以下版本的BSD子系统。它使用syscall挂钩和DKOM的组合来隐藏主机上的活动。
backdoor后门shellinaboxImplements a web server that can export arbitrary command line tools to a web based terminal emulator.实现可以将任意命令行工具导出到基于Web的终端仿真器的Web服务器。
backdoor后门shootbackA reverse TCP tunnel let you access target behind NAT or firewall.通过反向TCP隧道,您可以访问NAT或防火墙后面的目标。
backdoor后门syringeA General Purpose DLL & Code Injection Utility.通用DLL和代码注入实用程序。
backdoor后门trixd00rAn advanced and invisible userland backdoor based on TCP/IP for UNIX systems.基于TCP / IP的UNIX系统的高级和不可见用户区后门。
backdoor后门tshAn open-source UNIX backdoor that compiles on all variants, has full pty support, and uses strong crypto for communication.一个开源的UNIX后门程序,可以编译所有变种,具有完整的pty支持,并使用强大的加密进行通信。
backdoor后门tsh-sctpAn open-source UNIX backdoor.一个开源的UNIX后门程序。
backdoor后门u3-pwnA tool designed to automate injecting executables to Sandisk smart usb devices with default U3 software install.一种工具,旨在通过默认的U3软件安装自动将可执行文件注入Sandisk smart usb设备。
backdoor后门unicorn-powershellA simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory.一个使用PowerShell降级攻击并将shellcode直接注入内存的简单工具。
backdoor后门vlanyLinux LD_PRELOAD rootkit (x86 and x86_64 architectures).Linux LD_PRELOAD rootkit(x86和x86_64体系结构)。
backdoor后门webacooWeb Backdoor Cookie Script-Kit.Web Backdoor Cookie Script-Kit。
backdoor后门webshellsWeb Backdoors.网络后门。
backdoor后门webspaA web knocking tool, sending a single HTTP/S to run O/S commands.Web敲门工具,发送单个HTTP / S以运行O / S命令。
binary二进制amberReflective PE packer.反光PE包装机。
binary二进制amocoYet another tool for analysing binaries.另一种分析二进制文件的工具。
binary二进制androguardReverse engineering, Malware and goodware analysis of Android applications and more.Android应用程序的逆向工程,恶意软件和良好软件分析等。
binary二进制angrThe next-generation binary analysis platform from UC Santa Barbaras Seclab.UC Santa Barbaras Seclab的下一代二进制分析平台。
binary二进制angr-managementThis is the GUI for angr.这是angr的GUI。
binary二进制angr-py2The next-generation binary analysis platform from UC Santa Barbaras Seclab.UC Santa Barbaras Seclab的下一代二进制分析平台。
binary二进制avetAntiVirus Evasion ToolAntiVirus Evasion工具
binary二进制barfA multiplatform open source Binary Analysis and Reverse engineering Framework.多平台开源二进制分析和逆向工程框架。
binary二进制bgrepBinary grep.二进制grep。
binary二进制binaryninja-pythonBinary Ninja prototype written in Python.用Python编写的二进制忍者原型。
binary二进制bindeadA static analysis tool for binaries二进制文件的静态分析工具
binary二进制bindiffA comparison tool for binary files, that assists vulnerability researchers and engineers to quickly find differences and similarities in disassembled code.二进制文件的比较工具,可帮助漏洞研究人员和工程师快速找到反汇编代码中的差异和相似之处。
binary二进制binflowPOSIX function tracing. Much better and faster than ftrace.POSIX函数跟踪。比ftrace更好更快。
binary二进制binwallyBinary and Directory tree comparison tool using the Fuzzy Hashing concept (ssdeep).使用模糊散列概念(ssdeep)的二进制和目录树比较工具。
binary二进制bviA display-oriented editor for binary files operate like "vi" editor.面向显示的二进制文件编辑器的操作类似于“vi”编辑器。
binary二进制bytecode-viewerA Java 8/Android APK Reverse Engineering Suite.Java 8 / Android APK逆向工程套件。
binary二进制cminerA tool for enumerating the code caves in PE files.用于枚举PE文件中的代码洞穴的工具。
binary二进制detect-it-easyA program for determining types of files.用于确定文件类型的程序。
binary二进制dissectorThis code dissects the internal data structures in ELF files. It supports x86 and x86_64 archs and runs under Linux.此代码剖析ELF文件中的内部数据结构。它支持x86和x86_64 archs并在Linux下运行。
binary二进制dutasAnalysis PE file or Shellcode.分析PE文件或Shellcode。
binary二进制dwarfFull featured multi arch/os debugger built on top of PyQt5 and frida.基于PyQt5和frida构建的全功能多arch / os调试器。
binary二进制ecfsExtended core file snapshot format.扩展核心文件快照格式。
binary二进制elfkickersCollection of ELF utilities (includes sstrip)ELF实用程序的集合(包括sstrip)
binary二进制elfparserCross Platform ELF analysis.跨平台ELF分析。
binary二进制eresiThe ERESI Reverse Engineering Software Interface.ERESI逆向工程软件接口。
binary二进制exescanA tool to detect anomalies in PE (Portable Executable) files.用于检测PE(可移植可执行文件)文件中的异常的工具。
binary二进制expimp-lookupLooks for all export and import names that contain a specified string in all Portable Executable in a directory tree.查找目录树中所有可移植可执行文件中包含指定字符串的所有导出和导入名称。
binary二进制exposeA Dynamic Symbolic Execution (DSE) engine for JavaScriptJavaScript的动态符号执行(DSE)引擎
binary二进制haystackA Python framework for finding C structures from process memory - heap analysis - Memory structures forensics.用于从进程内存中查找C结构的Python框架 - 堆分析 - 内存结构取证。
binary二进制hercules-payloadA special payload generator that can bypass all antivirus software.一种特殊的有效负载生成器,可以绕过所有防病毒软件。
binary二进制hex2binConverts Motorola and Intel hex files to binary.将Motorola和Intel hex文件转换为二进制文件。
binary二进制imagejsSmall tool to package javascript into a valid image file.将javascript打包成有效图像文件的小工具。
binary二进制jpegdumpTool to analyzse JPEG images Reads binary files and parses the JPEG markers inside them.分析JPEG图像的工具读取二进制文件并解析其中的JPEG标记。
binary二进制leenaSymbolic execution engine for JavaScriptJavaScript的符号执行引擎
binary二进制loadlibraryPorting Windows Dynamic Link Libraries to Linux.将Windows动态链接库移植到Linux。
binary二进制manticoreSymbolic execution tool.符号执行工具。
binary二进制metameA simple metamorphic code engine for arbitrary executables.用于任意可执行文件的简单变形代码引擎。
binary二进制objdump2shellcodeA tool I have found incredibly useful whenever creating custom shellcode.在创建自定义shellcode时,我发现了一个非常有用的工具。
binary二进制oledumpAnalyze OLE files (Compound File Binary Format). These files contain streams of data. This tool allows you to analyze these streams.分析OLE文件(复合文件二进制格式)。这些文件包含数据流。此工具允许您分析这些流。
binary二进制oletoolsTools to analyze Microsoft OLE2 files.分析Microsoft OLE2文件的工具。
binary二进制packertool for creating identical machine images for multiple platforms from a single source configuration用于从单个源配置为多个平台创建相同机器映像的工具
binary二进制packeridScript which uses a PEiD database to identify which packer (if any) is being used by a binary.使用PEiD数据库识别二进制文件正在使用哪个打包程序(如果有)的脚本。
binary二进制patchkitPowerful binary patching from Python.从Python强大的二进制修补。
binary二进制pixdColourful visualization tool for binary files.二进制文件的彩色可视化工具。
binary二进制powerstagerA payload stager using PowerShell.使用PowerShell的有效负载stager。
binary二进制procdumpGenerate coredumps based off performance triggers.根据性能触发器生成coredump。
binary二进制proctalProvides a command line interface and a C library to manipulate the address space of a running program on Linux.提供命令行界面和C库来操作Linux上正在运行的程序的地址空间。
binary二进制python-oletoolsTools to analyze Microsoft OLE2 files.分析Microsoft OLE2文件的工具。
binary二进制python2-oletoolsTools to analyze Microsoft OLE2 files.分析Microsoft OLE2文件的工具。
binary二进制sarumanELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection).ELF反取证执行,用于将完整的动态可执行文件注入过程映像(使用线程注入)。
binary二进制sootA Java Bytecode Analysis and Transformation Framework.Java字节码分析和转换框架。
binary二进制straceA diagnostic, debugging and instructional userspace tracer诊断,调试和指导用户空间跟踪器
binary二进制swftoolsA collection of SWF manipulation and creation utilities.SWF操作和创建实用程序的集合。
binary二进制tritonA Dynamic Binary Analysis (DBA) framework.动态二进制分析(DBA)框架。
binary二进制upxUltimate executable compressor.终极执行压缩器。
binary二进制valgrindTool to help find memory-management problems in programs帮助查找程序中的内存管理问题的工具
binary二进制velesNew open source tool for binary data analysis.用于二进制数据分析的新型开源工具。
binary二进制wccThe Witchcraft Compiler Collection.巫术编译器集合。
binary二进制wxhexeditorA free hex editor / disk editor for Linux, Windows and MacOSX.适用于Linux,Windows和MacOSX的免费十六进制编辑器/磁盘编辑器。
bluetooth蓝牙bluebuggerAn implementation of the bluebug technique which was discovered by Martin Herfurt.由Martin Herfurt发现的bluebug技术的实现。
bluetooth蓝牙bluedivingA Bluetooth penetration testing suite.蓝牙渗透测试套件。
bluetooth蓝牙bluelogA Bluetooth scanner and sniffer written to do a single task, log devices that are in discoverable mode.写入蓝牙扫描仪和嗅探器以执行单个任务,记录处于可发现模式的设备。
bluetooth蓝牙bluepotA Bluetooth Honeypot written in Java, it runs on Linux用Java编写的蓝牙蜜罐,它运行在Linux上
bluetooth蓝牙blueprintA perl tool to identify Bluetooth devices.用于识别蓝牙设备的perl工具。
bluetooth蓝牙bluescanA Bluetooth Device Scanner.蓝牙设备扫描仪。
bluetooth蓝牙bluesnarferA bluetooth attacking tool.蓝牙攻击工具。
bluetooth蓝牙bluphishBluetooth device and service discovery tool that can be used for security assessment and penetration testing.蓝牙设备和服务发现工具,可用于安全评估和渗透测试。
bluetooth蓝牙bracesA Bluetooth Tracking Utility.蓝牙跟踪实用程序。
bluetooth蓝牙bssBluetooth stack smasher / fuzzer蓝牙堆栈smasher / fuzzer
bluetooth蓝牙bt_auditBluetooth audit蓝牙审核
bluetooth蓝牙btcrackThe world's first Bluetooth Pass phrase (PIN) bruteforce tool. Bruteforces the Passkey and the Link key from captured Pairing exchanges.世界上第一款蓝牙通行短语(PIN)强力工具。从捕获的配对交换中强制传递密钥和链接密钥。
bluetooth蓝牙btlejackBluetooth Low Energy Swiss-army knife.蓝牙低能量瑞士军刀。
bluetooth蓝牙btproxy-mitmMan in the Middle analysis tool for Bluetooth.用于蓝牙的中间人分析工具。
bluetooth蓝牙btscannerBluetooth device scanner.蓝牙设备扫描仪。
bluetooth蓝牙carwhispererIntends to sensibilise manufacturers of carkits and other Bluetooth appliances without display and keyboard for the possible security threat evolving from the use of standard passkeys.旨在使没有显示器和键盘的carkits和其他蓝牙设备制造商敏感,以防止因使用标准密码而产生的安全威胁。
bluetooth蓝牙ghettotoothGhettodriving for bluetoothGhettodriving为蓝牙
bluetooth蓝牙hidattackHID Attack (attacking HID host implementations)HID攻击(攻击HID主机实现)
bluetooth蓝牙obexstressScript for testing remote OBEX service for some potential vulnerabilities.用于测试某些潜在漏洞的远程OBEX服务的脚本。
bluetooth蓝牙redfangFinds non-discoverable Bluetooth devices by brute-forcing the last six bytes of the devices' Bluetooth addresses and calling read_remote_name().通过强制设备的蓝牙地址的最后六个字节并调用read_remote_name()来查找不可发现的蓝牙设备。
bluetooth蓝牙spooftoophDesigned to automate spoofing or cloning Bluetooth device Name, Class, and Address. Cloning this information effectively allows Bluetooth device to hide in plain sight.旨在自动欺骗或克隆蓝牙设备名称,类和地址。有效地克隆此信息允许蓝牙设备隐藏在视线之内。
bluetooth蓝牙tbearTransient Bluetooth Environment Auditor includes an ncurses-based Bluetooth scanner (a bit similar to kismet), a Bluetooth DoS tool, and a Bluetooth hidden device locator.瞬态蓝牙环境审核员包括基于ncurses的蓝牙扫描仪(有点类似于kismet),蓝牙DoS工具和蓝牙隐藏设备定位器。
bluetooth蓝牙ubertoothA 2.4 GHz wireless development board suitable for Bluetooth experimentation. Open source hardware and software. Tools only.适用于蓝牙实验的2.4 GHz无线开发板。开源硬件和软件。仅限工具。
code-audit代码审计bof-detectorA simple detector of BOF vulnerabilities by source-code-level check.通过源代码级别检查简单检测BOF漏洞。
code-audit代码审计brakemanA static analysis security vulnerability scanner for Ruby on Rails applications.适用于Ruby on Rails应用程序的静态分析安全漏洞扫描程序。
code-audit代码审计cflowA C program flow analyzer.AC程序流量分析仪。
code-audit代码审计cppcheckA tool for static C/C++ code analysis用于静态C / C ++代码分析的工具
code-audit代码审计cpptestA portable and powerful, yet simple, unit testing framework for handling automated tests in C++.一个可移植且功能强大且简单的单元测试框架,用于处理C ++中的自动化测试。
code-audit代码审计dscannerSwiss-army knife for D source code瑞士军刀为D源代码
code-audit代码审计flawfinderSearches through source code for potential security flaws通过源代码搜索潜在的安全漏洞
code-audit代码审计grauditGrep rough source code auditing tool.Grep粗略的源代码审计工具。
code-audit代码审计moscaStatic analysis tool to find bugs like a grep unix command.静态分析工具可以找到像grep unix命令一样的bug。
code-audit代码审计pfffTools and APIs for code analysis, visualization and transformation用于代码分析,可视化和转换的工具和API
code-audit代码审计pscanA limited problem scanner for C source filesC源文件的有限问题扫描程序
code-audit代码审计shellcheckShell script analysis toolShell脚本分析工具
code-audit代码审计snykCLI and build-time tool to find and fix known vulnerabilities in open-source dependencies.CLI和构建时工具,用于查找和修复开源依赖项中的已知漏洞。
code-audit代码审计splintA tool for statically checking C programs for security vulnerabilities and coding mistakes用于静态检查C程序是否存在安全漏洞和编码错误的工具
code-audit代码审计wpbulletA static code analysis for WordPress (and PHP).WordPress(和PHP)的静态代码分析。
code-audit代码审计wscriptEmulator/tracer of the Windows Script Host functionality.Windows脚本宿主功能的模拟器/跟踪器。
code-audit代码审计yascaMulti-Language Static Analysis Toolset.多语言静态分析工具集。
cracker破解acccheckA password dictionary attack tool that targets windows authentication via the SMB protocol.密码字典攻击工具,通过SMB协议进行Windows身份验证。
cracker破解aesfixA tool to find AES key in RAM.在RAM中查找AES密钥的工具。
cracker破解aeskeyfindA tool to find AES key in RAM.在RAM中查找AES密钥的工具。
cracker破解againstA very fast ssh attacking script which includes a multithreaded port scanning module (tcp connect) for discovering possible targets and a multithreaded brute-forcing module which attacks parallel all discovered hosts or given ip addresses from a list.一个非常快速的ssh攻击脚本,包括一个用于发现可能目标的多线程端口扫描模块(tcp connect)和一个多线程暴力破坏模块,它可以攻击所有发现的主机并从列表中获取IP地址。
cracker破解asleapActively recover LEAP/PPTP passwords.主动恢复LEAP / PPTP密码。
cracker破解belethA Multi-threaded Dictionary based SSH cracker.基于多线程词典的SSH破解程序。
cracker破解bgp-md5crackRFC2385 password crackerRFC2385密码破解程序
cracker破解bios_memimageA tool to dump RAM contents to disk (aka cold boot attack).将RAM内容转储到磁盘的工具(又称冷启动攻击)。
cracker破解bkhiveProgram for dumping the syskey bootkey from a Windows NT/2K/XP system hive.从Windows NT / 2K / XP系统配置单元转储syskey bootkey的程序。
cracker破解blackhashCreates a filter from system hashes从系统哈希创建过滤器
cracker破解bob-the-butcherA distributed password cracker package.分布式密码破解程序包。
cracker破解brut3k1tBrute-force attack that supports multiple protocols and services.支持多种协议和服务的暴力攻击。
cracker破解bruteforce-luksTry to find the password of a LUKS encrypted volume.尝试查找LUKS加密卷的密码。
cracker破解bruteforce-salted-opensslTry to find the password of a file that was encrypted with the 'openssl' command.尝试查找使用“openssl”命令加密的文件的密码。
cracker破解bruteforce-walletTry to find the password of an encrypted Peercoin (or Bitcoin,Litecoin, etc...) wallet file.尝试找到加密的Peercoin(或比特币,Litecoin等)钱包文件的密码。
cracker破解brutesshA simple sshd password bruteforcer using a wordlist, it's very fast for internal networks. It's multithreads.一个简单的sshd密码bruteforcer使用wordlist,它对内部网络来说非常快。它是多线程的。
cracker破解chapcrackA tool for parsing and decrypting MS-CHAPv2 network handshakes.用于解析和解密MS-CHAPv2网络握手的工具。
cracker破解checkpwdOracle Password Checker (Cracker).Oracle密码检查器(Cracker)。
cracker破解cintruderAn automatic pentesting tool to bypass captchas.一种绕过验证码的自动测试工具。
cracker破解cisco-auditing-toolPerl script which scans cisco routers for common vulnerabilities. Checks for default passwords, easily guessable community names, and the IOS history bug. Includes support for plugins and scanning multiple hosts.Perl脚本扫描cisco路由器的常见漏洞。检查默认密码,易于猜测的社区名称和IOS历史记录错误。包括对插件的支持和扫描多个主机。
cracker破解cisco-ocsCisco Router Default Password Scanner.Cisco路由器默认密码扫描程序。
cracker破解cisco-scannerMultithreaded Cisco HTTP vulnerability scanner. Tested on Linux, OpenBSD and Solaris.多线程Cisco HTTP漏洞扫描程序。在Linux,OpenBSD和Solaris上测试过。
cracker破解cisco5crackCrypt and decrypt the cisco enable 5 passwords.加密并解密cisco启用5个密码。
cracker破解cisco7crackCrypt and decrypt the cisco enable 7 passwords.加密并解密cisco启用7个密码。
cracker破解cmospwdDecrypts password stored in CMOS used to access BIOS setup.存储在CMOS中的解密密码用于访问BIOS设置。
cracker破解crackhorA Password cracking utility.密码破解实用程序。
cracker破解crackleCrack and decrypt BLE encryption破解和解密BLE加密
cracker破解crackqHashcrack.org GPU-accelerated password cracker.Hashcrack.org GPU加速密码破解程序。
cracker破解crackserverAn XMLRPC server for password cracking.用于密码破解的XMLRPC服务器。
cracker破解creddumpA python tool to extract various credentials and secrets from Windows registry hives.一个python工具,用于从Windows注册表配置单元中提取各种凭据和机密。
cracker破解crowbarA brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.可在穿透测试期间使用的强力推进工具。它的开发是为了支持thc-hydra和其他流行的强力工具目前不支持的协议。
cracker破解cryptohazemultiforcerHigh performance multihash brute forcer with CUDA support.高性能multihash brute forcer,支持CUDA。
cracker破解cudahashcatWorlds fastest WPA cracker with dictionary mutation engine.世界上最快的WPA破解者与字典变异引擎。
cracker破解cuppCommon User Password Profiler通用用户密码分析器
cracker破解dbpwauditA Java tool that allows you to perform online audits of password quality for several database engines.一种Java工具,允许您对多个数据库引擎执行密码质量的在线审核。
cracker破解depantCheck network for services with default passwords.使用默认密码检查网络中的服务。
cracker破解device-pharmerOpens 1K+ IPs or Shodan search results and attempts to login.打开1K + IP或Shodan搜索结果并尝试登录。
cracker破解doozerA Password cracking utility.密码破解实用程序。
cracker破解dpeparserDefault password enumeration project默认密码枚举项目
cracker破解eapmd5passAn implementation of an offline dictionary attack against the EAP-MD5 protocol针对EAP-MD5协议的离线字典攻击的实现
cracker破解enablerAttempts to find the enable password on a cisco system via brute force.尝试通过强力在cisco系统上查找启用密码。
cracker破解evilizeTool to create MD5 colliding binaries.创建MD5碰撞二进制文件的工具。
cracker破解evilmaidTrueCrypt loader backdoor to sniff volume passwordTrueCrypt装载机后门嗅探密码
cracker破解f-scrackA single file bruteforcer supports multi-protocol.单个文件bruteforcer支持多协议。
cracker破解facebruteThis script tries to guess passwords for a given facebook account using a list of passwords (dictionary).此脚本尝试使用密码列表(字典)猜测给定Facebook帐户的密码。
cracker破解fangA multi service threaded MD5 cracker.多服务线程MD5破解器。
cracker破解fcrackzipZip file password crackerZip文件密码破解程序
cracker破解fern-wifi-crackerWEP, WPA wifi cracker for wireless penetration testingWEP,WPA wifi破解器用于无线渗透测试
cracker破解ftp-scannerMultithreaded ftp scanner/brute forcer. Tested on Linux, OpenBSD and Solaris.多线程ftp扫描仪/暴力破碎机。在Linux,OpenBSD和Solaris上测试过。
cracker破解hashcatMultithreaded advanced password recovery utility多线程高级密码恢复实用程序
cracker破解hasherA tool that allows you to quickly hash plaintext strings, or compare hashed values with a plaintext locally.一种工具,允许您快速散列明文字符串,或将散列值与本地明文进行比较。
cracker破解hashtagA python script written to parse and identify password hashes.编写用于解析和识别密码哈希值的python脚本。
cracker破解hostbox-sshA ssh password/account scanner.一个ssh密码/帐户扫描程序。
cracker破解htpwdscanA python HTTP weak pass scanner.一个python HTTP弱传递扫描器。
cracker破解hydraVery fast network logon cracker which support many different services非常快速的网络登录cracker,支持许多不同的服务
cracker破解ibruteAn AppleID password bruteforce tool. It uses Find My Iphone service API, where bruteforce protection was not implemented.AppleID密码暴力工具。它使用Find My Iphone服务API,其中未实现强力保护。
cracker破解icloudbrutterTool for AppleID Bruteforce.AppleID Bruteforce工具。
cracker破解iheartxorA tool for bruteforcing encoded strings within a boundary defined by a regular expression. It will bruteforce the key value range of 0x1 through 0x255.用于在由正则表达式定义的边界内强制编码字符串的工具。它将强制执行0x1到0x255的键值范围。
cracker破解iisbruteforcerHTTP authentication cracker. It's a tool that launchs an online dictionary attack to test for weak or simple passwords against protected areas on an IIS Web server.HTTP身份验证破解程序。它是一种启动在线字典攻击的工具,用于测试IIS Web服务器上受保护区域的弱密码或简单密码。
cracker破解ikecrackAn IKE/IPSec crack tool designed to perform Pre-Shared-Key analysis of RFC compliant aggressive mode authenticationIKE / IPSec破解工具,用于执行符合RFC的主动模式身份验证的预共享密钥分析
cracker破解ingumaA free penetration testing and vulnerability discovery toolkit entirely written in python. Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and passwords, exploits, and a disassembler.完全用python编写的免费渗透测试和漏洞发现工具包。框架包括发现主机,收集有关信息,模糊目标,暴力用户名和密码,漏洞利用程序和反汇编程序的模块。
cracker破解instashellMulti-threaded Instagram Brute Forcer without password limit.多线程Instagram Brute Forcer没有密码限制。
cracker破解ipmipwnIPMI cipher 0 attack tool.IPMI密码0攻击工具。
cracker破解jbruteOpen Source Security tool to audit hashed passwords.用于审核散列密码的开源安全工具。
cracker破解jeangreyA tool to perform differential fault analysis attacks (DFA).一种执行差分故障分析攻击(DFA)的工具。
cracker破解johnJohn the Ripper password crackerJohn the Ripper密码破解者
cracker破解johnnyGUI for John the Ripper.John the Ripper的GUI。
cracker破解jwt-crackerJWT brute force cracker written in C.用C写的JWT蛮力饼干
cracker破解keimpxTool to verify the usefulness of credentials across a network over SMB.用于通过SMB验证网络上凭据的有用性的工具。
cracker破解khcA small tool designed to recover hashed known_hosts fiels back to their plain-text equivalents.一个旨在恢复散列known_hosts的小工具可以恢复到它们的纯文本等价物。
cracker破解ldap-bruteA semi fast tool to bruteforce values of LDAP injections over HTTP.一种半快速工具,可通过HTTP强制执行LDAP注入的值。
cracker破解levyeA brute force tool which is support sshkey, vnckey, rdp, openvpn.一个强大的工具,支持sshkey,vnckey,rdp,openvpn。
cracker破解lodowepLodowep is a tool for analyzing password strength of accounts on a Lotus Domino webserver system.Lodowep是一种用于分析Lotus Domino Web服务器系统上帐户密码强度的工具。
cracker破解mdcrackMD4/MD5/NTLM1 hash crackerMD4 / MD5 / NTLM1哈希破解器
cracker破解medusaSpeedy, massively parallel and modular login brute-forcer for network用于网络的快速,大规模并行和模块化登录brute-forcer
cracker破解mfocMiFare Classic Universal toolKitMiFare Classic Universal toolKit
cracker破解mkbrutusPassword bruteforcer for MikroTik devices or boxes running RouterOS.用于MikroTik设备的密码强制执行器或运行RouterOS的盒子。
cracker破解morxbookA password cracking tool written in perl to perform a dictionary-based attack on a specific Facebook user through HTTPS.用perl编写的密码破解工具,通过HTTPS对特定的Facebook用户执行基于字典的攻击。
cracker破解morxbruteA customizable HTTP dictionary-based password cracking tool written in Perl.一个用Perl编写的可自定义的基于HTTP字典的密码破解工具。
cracker破解morxbtcrackSingle Bitcoin private key cracking tool released.发布单比特币私钥破解工具。
cracker破解morxcoinpwnMass Bitcoin private keys brute forcing/Take over tool released.大量比特币私钥暴力强制/接管工具发布。
cracker破解morxcrackA cracking tool written in Perl to perform a dictionary-based attack on various hashing algorithm and CMS salted-passwords.用Perl编写的破解工具,用于对各种散列算法和CMS salted-passwords执行基于字典的攻击。
cracker破解mybffA Brute Force Framework.蛮力框架。
cracker破解ncrackHigh-speed network authentication cracking tool高速网络认证破解工具
cracker破解oclhashcatWorlds fastest WPA cracker with dictionary mutation engine.世界上最快的WPA破解者与字典变异引擎。
cracker破解omenOrdered Markov ENumerator - Password Guesser.有序马尔可夫枚举器 - 密码猜测器。
cracker破解onesixtyoneAn SNMP scanner that sends multiple SNMP requests to multiple IP addressesSNMP扫描程序,可将多个SNMP请求发送到多个IP地址
cracker破解ophcrackWindows password cracker based on rainbow tables基于彩虹表的Windows密码破解程序
cracker破解outlook-webapp-bruteMicrosoft Outlook WebAPP Brute.Microsoft Outlook WebAPP Brute。
cracker破解owabfOutlook Web Access bruteforcer tool.Outlook Web Access bruteforcer工具。
cracker破解packPassword Analysis and Cracking Kit密码分析和破解工具包
cracker破解passcrackingA little python script for sending hashes to passcracking.com and milw0rm一个小的python脚本,用于将散列发送到passcracking.com和milw0rm
cracker破解passe-partoutTool to extract RSA and DSA private keys from any process linked with OpenSSL. The target memory is scanned to lookup specific OpenSSL patterns.用于从与OpenSSL链接的任何进程中提取RSA和DSA私钥的工具。扫描目标内存以查找特定的OpenSSL模式。
cracker破解patatorA multi-purpose bruteforcer.多用途的bruteforcer。
cracker破解pdfcrackPassword recovery tool for PDF-filesPDF文件的密码恢复工具
cracker破解pdgmailA password dictionary attack tool that targets windows authentication via the SMB protocol.密码字典攻击工具,通过SMB协议进行Windows身份验证。
cracker破解pemcrackCracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks.破解包含加密私钥的SSL PEM文件。蛮力或字典裂缝。
cracker破解pemcrackerTool to crack encrypted PEM files.破解加密的PEM文件的工具。
cracker破解phossSniffer designed to find HTTP, FTP, LDAP, Telnet, IMAP4, VNC and POP3 logins.Sniffer旨在查找HTTP,FTP,LDAP,Telnet,IMAP4,VNC和POP3登录。
cracker破解php-mt-seedPHP mt_rand() seed cracker.PHP mt_rand()种子破解者。
cracker破解php-rfi-payload-decoderDecode and analyze RFI payloads developed in PHP.解码和分析PHP开发的RFI有效负载。
cracker破解phrasendrescherA modular and multi processing pass phrase cracking tool.模块化和多处理密码破解工具。
cracker破解pipalA password analyser.密码分析。
cracker破解pipelineDesigned to aid in targeted brute force password cracking attacks.旨在帮助有针对性的暴力密码破解攻击。
cracker破解pkcrackA PkZip encryption cracker.PkZip加密破解程序。
cracker破解pybozocrackA silly & effective MD5 cracker in Python.Python中一个愚蠢而有效的MD5破解程序。
cracker破解pyritThe famous WPA precomputed cracker着名的WPA预先计算好的饼干
cracker破解rainbowcrackPassword cracker based on the faster time-memory trade-off. With MySQL and Cisco PIX Algorithm patches.密码破解程序基于更快的时间内存权衡。使用MySQL和Cisco PIX算法补丁。
cracker破解rarcrackThis program uses bruteforce algorithm to find correct password (rar, 7z, zip).该程序使用bruteforce算法来查找正确的密码(rar,7z,zip)。
cracker破解rcracki-mtA tool to perform rainbow table attacks on password hashes. It is intended for indexed/perfected rainbow tables, mainly generated by the distributed project www.freerainbowtables.com用于对密码哈希执行彩虹表攻击的工具。它适用于索引/完善的彩虹表,主要由分布式项目www.freerainbowtables.com生成
cracker破解rdesktop-bruteIt connects to windows terminal servers - Bruteforce patch included.它连接到Windows终端服务器 - 包括Bruteforce补丁。
cracker破解ridenumA null session RID cycle attack for brute forcing domain controllers.针对暴力强制域控制器的空会话RID周期攻击。
cracker破解rlogin-scannerMultithreaded rlogin scanner. Tested on Linux, OpenBSD and Solaris.多线程rlogin扫描程序。在Linux,OpenBSD和Solaris上测试过。
cracker破解rootbruteLocal root account bruteforcer.本地root帐户bruteforcer。
cracker破解rpdscanRemmina Password Decoder and scanner.Remmina密码解码器和扫描仪。
cracker破解rsakeyfindA tool to find RSA key in RAM.在RAM中查找RSA密钥的工具。
cracker破解samdump2Dump password hashes from a Windows NT/2k/XP installation从Windows NT / 2k / XP安装转储密码哈希
cracker破解samydeluxeAutomatic samdump creation script.自动samdump创建脚本。
cracker破解sidguesserGuesses sids/instances against an Oracle database according to a predefined dictionary file.根据预定义的字典文件猜测针对Oracle数据库的sid /实例。
cracker破解sipcrackA SIP protocol login cracker.SIP协议登录破解程序。
cracker破解skulA PoC to bruteforce the Cryptsetup implementation of Linux Unified Key Setup (LUKS).PoC强制执行Linux Unified Key Setup(LUKS)的Cryptsetup实现。
cracker破解smbbfSMB password bruteforcer.SMB密码强制执行者。
cracker破解snmp-bruteSNMP brute force, enumeration, CISCO config downloader and password cracking script.SNMP暴力,枚举,CISCO配置下载和密码破解脚本。
cracker破解speedpwnAn active WPA/2 Bruteforcer, original created to prove weak standard key generation in different ISP labeled routers without a client is connected.一个活动的WPA / 2 Bruteforcer,原始创建用于证明在没有客户端的不同ISP标记的路由器中生成弱标准密钥生成。
cracker破解sqlpatThis tool should be used to audit the strength of Microsoft SQL Server passwords offline.此工具应用于离线审核Microsoft SQL Server密码的强度。
cracker破解ssh-privkey-crackA SSH private key cracker.一个SSH私钥破解者。
cracker破解sshatterPassword bruteforcer for SSH.SSH的密码强制执行器。
cracker破解sshscanA horizontal SSH scanner that scans large swaths of IPv4 space for a single SSH user and pass.一个水平SSH扫描程序,可扫描单个SSH用户的大块IPv4空间并通过。
cracker破解sshtrixA very fast multithreaded SSH login cracker.一个非常快速的多线程SSH登录破解程序。
cracker破解sslnukeTransparent proxy that decrypts SSL traffic and prints out IRC messages.透明代理,用于解密SSL流量并打印出IRC消息。
cracker破解sucrackA multi-threaded Linux/UNIX tool for brute-force cracking local user accounts via su一种多线程Linux / UNIX工具,用于通过su强制破解本地用户帐户
cracker破解tckfcTrueCrypt key file cracker.TrueCrypt密钥文件破解程序。
cracker破解tftp-bruteforceA fast TFTP filename bruteforcer written in perl.用perl编写的快速TFTP文件名bruteforcer。
cracker破解thc-keyfinderFinds crypto keys, encrypted data and compressed data in files by analyzing the entropy of parts of the file.通过分析文件各部分的熵,在文件中查找加密密钥,加密数据和压缩数据。
cracker破解thc-pptp-bruterA brute force program that works against pptp vpn endpoints (tcp port 1723).对pptp vpn端点(tcp端口1723)起作用的强制程序。
cracker破解thc-smartbruteThis tool finds undocumented and secret commands implemented in a smartcard.此工具查找在智能卡中实现的未记录和秘密命令。
cracker破解truecrackPassword cracking for truecrypt(c) volumes.truecrypt(c)卷的密码破解。
cracker破解ufo-wardrivingAllows you to test the security of wireless networks by detecting their passwords based on the router model.允许您通过根据路由器型号检测其密码来测试无线网络的安全性。
cracker破解vnc-bypauthMulti-threaded bypass authentication scanner for VNC smaller than v4.1.1 servers.VNC的多线程旁路认证扫描程序小于v4.1.1服务器。
cracker破解vncrackWhat it looks like: crack VNC.它看起来像:破解VNC。
cracker破解wmatAutomatic tool for testing webmail accounts.用于测试webmail帐户的自动工具。
cracker破解wordbrutepressPython script that performs brute forcing against WordPress installs using a wordlist.Python脚本,使用wordlist对WordPress安装执行强制强制。
cracker破解wpbfMultithreaded WordPress brute forcer.多线程WordPress粗暴的forcer。
cracker破解wpbrute-rpcTool for amplified bruteforce attacks on wordpress based website via xmlrcp API.通过xmlrcp API对基于wordpress的网站进行放大暴力攻击的工具。
cracker破解wydGets keywords from personal files. IT security/forensic tool.从个人文件中获取关键字。IT安全/取证工具。
cracker破解zuluA light weight 802.11 wireless frame generation tool to enable fast and easy debugging and probing of 802.11 networks.轻量级802.11无线帧生成工具,可以快速轻松地调试和探测802.11网络。
cracking破解obevilionAnother archive cracker created in python另一个在python中创建的存档破解程序
crypto加密aespipeReads data from stdin and outputs encrypted or decrypted results to stdout.从stdin读取数据并将加密或解密的结果输出到stdout。
crypto加密argon2A password-hashing function (reference C implementation)密码散列函数(参考C实现)
crypto加密auto-xor-decryptorAutomatic XOR decryptor tool.自动XOR解密器工具。
crypto加密bletchleyA collection of practical application cryptanalysis tools.一组实用的应用程序密码分析工具。
crypto加密ciphertestA better SSL cipher checker using gnutls.使用gnutls的更好的SSL密码检查程序。
crypto加密ciphrA CLI tool for encoding, decoding, encryption, decryption, and hashing streams of data.用于编码,解码,加密,解密和散列数据流的CLI工具。
crypto加密codetectiveA tool to determine the crypto/encoding algorithm used according to traces of its representation.一种工具,用于根据其表示的痕迹确定使用的加密/编码算法。
crypto加密cribdragAn interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys.一种交互式婴儿床拖动工具,用于对使用重用或可预测的流密码密钥生成的密文进行密码分析。
crypto加密crypthookTCP/UDP symmetric encryption tunnel wrapper.TCP / UDP对称加密隧道包装器。
crypto加密cryptonarkSSL security checker.SSL安全检查程序。
crypto加密dagonAdvanced Hash Manipulation.高级哈希操作。
crypto加密daredevilA tool to perform (higher-order) correlation power analysis attacks (CPA).执行(高阶)相关功率分析攻击(CPA)的工具。
crypto加密decodifyTool that can detect and decode encoded strings, recursively.可以递归地检测和解码编码字符串的工具。
crypto加密deenGeneric data encoding/decoding application built with PyQt5.使用PyQt5构建的通用数据编码/解码应用程序。
crypto加密demiguiseHTA encryption tool for RedTeams.适用于RedTeams的HTA加密工具。
crypto加密dislockerRead BitLocker encrypted volumes under Linux在Linux下读取BitLocker加密卷
crypto加密factordb-pycliCLI for factordb and Python API Client.用于factordb和Python API客户端的CLI。
crypto加密featherdusterAn automated, modular cryptanalysis tool.一种自动化的模块化密码分析工具。
crypto加密findmyhashCrack different types of hashes using free online services使用免费在线服务破解不同类型的哈希
crypto加密foresightA tool for predicting the output of random number generators.用于预测随机数生成器输出的工具。
crypto加密gcryptSimple file encryption tool written in C++.用C ++编写的简单文件加密工具。
crypto加密gnutls2A library which provides a secure layer over a reliable transport layer (Version 2)在可靠传输层上提供安全层的库(版本2)
crypto加密hash-busterA python script which scraps online hash crackers to find cleartext of a hash.一个python脚本,它会废弃在线哈希破解程序以查找散列的明文。
crypto加密hash-extenderA hash length extension attack tool.哈希长度扩展攻击工具。
crypto加密hashdbA block hash toolkit.块哈希工具包。
crypto加密hashdeepcross-platform tools to message digests for any number of files跨平台工具,用于消息任意数量的文件摘要
crypto加密hashfindA tool to search files for matching password hash types and other interesting data.搜索文件以查找匹配密码哈希类型和其他有趣数据的工具。
crypto加密hashidSoftware to identify the different types of hashes used to encrypt data.用于识别用于加密数据的不同类型哈希的软件。
crypto加密hashpumpA tool to exploit the hash length extension attack in various hashing algorithms.一种在各种散列算法中利用散列长度扩展攻击的工具。
crypto加密hcxkeysSet of tools to generate plainmasterkeys (rainbowtables) and hashes for hashcat and John the Ripper用于为hashcat和John the Ripper生成plainmasterkeys(rainbowtables)和哈希的工具集
crypto加密hdcp-genkeyGenerate HDCP source and sink keys from the leaked master key.从泄漏的主密钥生成HDCP源和宿密钥。
crypto加密hlextendPure Python hash length extension module.纯Python哈希长度扩展模块。
crypto加密krakenA project to encrypt A5/1 GSM signaling using a Time/Memory Tradeoff Attack.使用时间/内存权衡攻击加密A5 / 1 GSM信令的项目。
crypto加密libbdeA library to access the BitLocker Drive Encryption (BDE) format.用于访问BitLocker驱动器加密(BDE)格式的库。
crypto加密luksipcA tool to convert unencrypted block devices to encrypted LUKS devices in-place.一种将未加密的块设备就地转换为加密的LUKS设备的工具。
crypto加密morxkeyfmtRead a private key from stdin and output formatted data values.从stdin读取私钥并输出格式化的数据值。
crypto加密nomorexorTool to help guess a files 256 byte XOR key by using frequency analysis.使用频率分析帮助猜测文件256字节XOR密钥的工具。
crypto加密omnihashHash files, strings, input streams and network resources in various common algorithms simultaneously.同时在各种常见算法中散列文件,字符串,输入流和网络资源。
crypto加密openstegoA tool implemented in Java for generic steganography, with support for password-based encryption of the data.用Java实现的通用隐写工具,支持基于密码的数据加密。
crypto加密outguessA universal steganographic tool.通用的隐写工具。
crypto加密pacumenPacket Acumen - Analyse encrypted network traffic and more (side-channel attacks).Packet Acumen - 分析加密的网络流量和更多(侧通道攻击)。
crypto加密pip3lineThe Swiss army knife of byte manipulation.字节操纵的瑞士军刀。
crypto加密poracleA tool for demonstrating padding oracle attacks.用于演示填充oracle攻击的工具。
crypto加密posttesterA jar file that will send POST requests to servers in order to test for the hash collision vulnerability discussed at the Chaos Communication Congress in Berlin.一个jar文件,它将向服务器发送POST请求,以测试柏林Chaos通信大会讨论的哈希冲突漏洞。
crypto加密pwd-hashA password hashing tool that use the crypt function to generate the hash of a string given on standard input.密码散列工具,使用crypt函数生成标准输入上给出的字符串的散列。
crypto加密pwdlyserPython-based CLI Password Analyser (Reporting Tool).基于Python的CLI密码分析器(报告工具)。
crypto加密rsactftoolRSA tool for ctf - retreive private key from weak public key and/or uncipher data.用于ctf的RSA工具 - 来自弱公钥和/或uncipher数据的retreive私钥。
crypto加密rsatoolTool that can be used to calculate RSA and RSA-CRT parameters.可用于计算RSA和RSA-CRT参数的工具。
crypto加密sbdNetcat-clone, portable, offers strong encryption - features AES-CBC + HMAC-SHA1 encryption, program execution (-e), choosing source port, continuous reconnection with delay + moreNetcat-clone,可移植,提供强大的加密功能 - 具有AES-CBC + HMAC-SHA1加密,程序执行(-e),选择源端口,连续重新连接和延迟+更多功能
crypto加密sha1collisiondetectionLibrary and command line tool to detect SHA collision in a file用于检测文件中的SHA冲突的库和命令行工具
crypto加密snowSteganography program for concealing messages in text files.用于隐藏文本文件中的消息的隐写程序。
crypto加密ssdeepA program for computing context triggered piecewise hashes用于计算上下文触发的分段散列的程序
crypto加密sslyzePython tool for analyzing the configuration of SSL servers and for identifying misconfigurations.Python工具,用于分析SSL服务器的配置和识别错误配置。
crypto加密testssl.shTesting TLS/SSL encryption测试TLS / SSL加密
crypto加密tls-attackerA Java-based framework for analyzing TLS libraries.用于分析TLS库的基于Java的框架。
crypto加密tlsenumA command line tool to enumerate TLS cipher-suites supported by a server.用于枚举服务器支持的TLS密码套件的命令行工具。
crypto加密tlsfuzzerSSL and TLS protocol test suite and fuzzer.SSL和TLS协议测试套件和模糊器。
crypto加密tlspretenseSSL/TLS client testing framework.SSL / TLS客户端测试框架。
crypto加密untwisterSeed recovery tool for PRNGs.PRNG的种子恢复工具。
crypto加密veracryptDisk encryption with strong security based on TrueCrypt基于TrueCrypt的强大安全性的磁盘加密
crypto加密xorbruteforcerScript that implements a XOR bruteforcing of a given file, although a specific key can be used too.虽然也可以使用特定的密钥,但是实现给定文件的XOR强制执行的脚本。
crypto加密xorsearchProgram to search for a given string in an XOR, ROL or ROT encoded binary file.用于在XOR,ROL或ROT编码的二进制文件中搜索给定字符串的程序。
crypto加密xortoolA tool to analyze multi-byte xor cipher.一种分析多字节xor密码的工具。
crypto加密zulucryptFront end to cryptsetup and tcplay and it allows easy management of encrypted block devices.cryptsetup和tcplay的前端,可以轻松管理加密的块设备。
database数据库blindsqlSet of bash scripts for blind SQL injection attacks.用于盲目SQL注入攻击的bash脚本集。
database数据库flamerobinA tool to handle Firebird database management.一种处理Firebird数据库管理的工具。
database数据库getsidsGetsids tries to enumerate Oracle Sids by sending the services command to the Oracle TNS listener. Like doing ‘lsnrctl service’.Getsids尝试通过将services命令发送到Oracle TNS侦听器来枚举Oracle Sids。喜欢做'lsnrctl服务'。
database数据库metacoretexMetaCoretex is an entirely JAVA vulnerability scanning framework for databases.MetaCoretex是一个完全用于数据库的JAVA漏洞扫描框架。
database数据库mysql2sqliteConverts a mysqldump file into a Sqlite 3 compatible file.将mysqldump文件转换为Sqlite 3兼容文件。
database数据库pgdbfConvert XBase / FoxPro databases to PostgreSQL将XBase / FoxPro数据库转换为PostgreSQL
debugger调试器edbA QT4-based binary mode debugger with the goal of having usability on par with OllyDbg.基于QT4的二进制模式调试器,其目标是使用性与OllyDbg相同。
debugger调试器gdbThe GNU DebuggerGNU调试器
debugger调试器gdbguiBrowser-based gdb frontend using Flask and JavaScript to visually debug C, C++, Go, or Rust.基于浏览器的gdb前端使用Flask和JavaScript可视化调试C,C ++,Go或Rust。
debugger调试器gefMulti-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers.针对漏洞利用者和反向工程师的多架构GDB增强功能。
debugger调试器lldbNext generation, high-performance debugger下一代高性能调试器
debugger调试器ollydbgA 32-bit assembler-level analysing debugger.32位汇编程序级分析调试程序。
debugger调试器pedaPython Exploit Development Assistance for GDB针对GDB的Python漏洞利用开发协助
debugger调试器pwndbgMakes debugging with GDB suck less使用GDB调试更少
debugger调试器rrA Record and Replay Framework.记录和重播框架。
debugger调试器shellnoobA toolkit that eases the writing and debugging of shellcode.一个工具包,可以简化shellcode的编写和调试。
debugger调试器vivisectA Python based static analysis and reverse engineering framework, Vdb is a Python based research/reversing focused debugger and programatic debugging API by invisigoth of kenshotoVdb是一个基于Python的静态分析和逆向工程框架,是一个基于Python的研究/反转调试器和编程调试API,由kenshoto的invisigoth
debugger调试器voltronUI for GDB, LLDB and Vivisect's VDB.GDB,LLDB和Vivisect的VDB的UI。
decompiler反编译beebugA tool for checking exploitability.用于检查可利用性的工具。
decompiler反编译cfrAnother Java decompiler.另一个Java反编译器。
decompiler反编译fernflowerAn analytical decompiler for Java.Java的分析反编译器。
decompiler反编译jadxCommand line and GUI tools to produce Java source code from Android Dex and APK files用于从Android Dex和APK文件生成Java源代码的命令行和GUI工具
decompiler反编译jd-guiA standalone graphical utility that displays Java source codes of .class files.一个独立的图形实用程序,显示.class文件的Java源代码。
decompiler反编译jpexs-decompilerJPEXS Free Flash Decompiler.JPEXS免费Flash反编译器。
decompiler反编译luytenAn Open Source Java Decompiler Gui for Procyon.Procyon的开源Java反编译器Gui。
decompiler反编译procyonA suite of Java metaprogramming tools focused on code generation and analysis.一套Java元编程工具,专注于代码生成和分析。
decompiler反编译python-uncompyle6A Python cross-version decompiler.Python跨版本反编译器。
decompiler反编译recafModern Java bytecode editor.现代Java字节码编辑器。
decompiler反编译recstudioCross platform interactive decompiler跨平台交互式反编译器
decompiler反编译retdecRetargetable machine-code decompiler based on LLVM.基于LLVM的可重定向机器码反编译器。
defensive防御性arponA portable handler daemon that make ARP protocol secure in order to avoid the Man In The Middle (MITM) attack through ARP Spoofing, ARP Cache Poisoning or ARP Poison Routing (APR) attacks.一种便携式处理程序守护程序,它使ARP协议安全,以避免通过ARP欺骗,ARP缓存中毒或ARP毒性路由(APR)攻击进行中间人(MITM)攻击。
defensive防御性arpstrawArp spoof detection tool.Arp欺骗检测工具。
defensive防御性artilleryA combination of a honeypot, file-system monitoring, system hardening, and overall health of a server to create a comprehensive way to secure a system.结合使用蜜罐,文件系统监控,系统强化和服务器的整体运行状况,创建一种保护系统安全的综合方法。
defensive防御性artlasApache Real Time Logs Analyzer System.Apache实时日志分析器系统。
defensive防御性chkrootkitChecks for rootkits on a system检查系统上的rootkit
defensive防御性detect-snifferTool that detects sniffers in the network.检测网络中嗅探器的工具。
defensive防御性fastnetmonHigh performance DoS/DDoS load analyzer built on top of multiple packet capture engines.基于多个数据包捕获引擎构建的高性能DoS / DDoS负载分析器。
defensive防御性fssbA low-level filesystem sandbox for Linux using syscall intercepts.用于Linux的低级文件系统沙箱,使用系统调用拦截。
defensive防御性ifchkA network interface promiscuous mode detection tool.网络接口混杂模式检测工具。
defensive防御性inetsimA software suite for simulating common internet services in a lab environment, e.g. for analyzing the network behaviour of unknown malware samples.用于在实验室环境中模拟常见互联网服务的软件套件,例如用于分析未知恶意软件样本的网络行为。
defensive防御性jheadEXIF JPEG info parser and thumbnail removerEXIF JPEG信息解析器和缩略图移除器
defensive防御性lorgApache Logfile Security Analyzer.Apache Logfile安全分析器。
defensive防御性maliceVirusTotal Wanna Be - Now with 100% more Hipster.VirusTotal想要 - 现在拥有100%的时髦。
defensive防御性malmonHosting exploit/backdoor detection daemon.托管漏洞利用/后门检测守护进程。
defensive防御性maltrailMalicious traffic detection system.恶意交通检测系统。
defensive防御性matMetadata Anonymisation Toolkit composed of a GUI application, a CLI application and a library.元数据匿名工具包由GUI应用程序,CLI应用程序和库组成。
defensive防御性mat2A metadata removal tool, supporting a wide range of commonly used file formats.元数据删除工具,支持各种常用文件格式。
defensive防御性nipeA script to make Tor Network your default gateway.使Tor Network成为默认网关的脚本。
defensive防御性portspoofThis program's primary goal is to enhance OS security through a set of new techniques.该计划的主要目标是通过一系列新技术增强操作系统安全性。
defensive防御性prowlerTool for AWS security assessment, auditing and hardening.用于AWS安全评估,审核和强化的工具。
defensive防御性quicksand-liteCommand line tool for scanning streams within office documents plus xor db attack.用于扫描office文档中的流以及xor db攻击的命令行工具。
defensive防御性sniffjokeInjects packets in the transmission flow that are able to seriously disturb passive analysis like sniffing, interception and low level information theft.在传输流中注入能够严重干扰被动分析的数据包,如嗅探,拦截和低级信息窃取。
defensive防御性snortA lightweight network intrusion detection system.轻量级网络入侵检测系统。
defensive防御性suricataAn Open Source Next Generation Intrusion Detection and Prevention Engine.开源下一代入侵检测和防御引擎。
defensive防御性tabiBGP Hijack Detection.BGP劫持检测。
defensive防御性tor-autocircuitTor Autocircuit was developed to give users a finer control over Tor circuit creation. The tool exposes the functionality of TorCtl library which allows its users to control circuit length, speed, geolocation, and other parameters.Tor Autocircuit的开发旨在让用户更好地控制Tor电路的创建。该工具公开了TorCtl库的功能,允许用户控制电路长度,速度,地理位置和其他参数。
defensive防御性tor-browser-enTor Browser Bundle: anonymous browsing using Firefox and Tor.Tor Browser Bundle:使用Firefox和Tor进行匿名浏览。
defensive防御性tor-routerA tool that allow you to make TOR your default gateway and send all internet connections under TOR (as transparent proxy) for increase privacy/anonymity without extra unnecessary code.一种工具,允许您将TOR作为默认网关,并在TOR(作为透明代理)下发送所有互联网连接,以增加隐私/匿名性,而无需额外的不必要代码。
defensive防御性truecryptFree open-source cross-platform disk encryption software免费的开源跨平台磁盘加密软件
defensive防御性tytonKernel-Mode Rootkit Hunter.内核模式Rootkit猎人。
defensive防御性zeusAWS Auditing & Hardening Tool.AWS审核和强化工具。
disassembler反汇编abcdActionScript ByteCode Disassembler.ActionScript ByteCode反汇编程序。
disassembler反汇编binnaviA binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.一个二进制分析IDE,允许检查,导航,编辑和注释控制流图和调用反汇编代码的图形。
disassembler反汇编binwalkA tool for searching a given binary image for embedded files用于在给定二进制图像中搜索嵌入文件的工具
disassembler反汇编chiasm-shellPython-based interactive assembler/disassembler CLI, powered byKeystone/Capstone.基于Python的交互式汇编程序/反汇编程序CLI,由Keystone / Capstone提供支持。
disassembler反汇编distormPowerful disassembler library for x86/AMD64适用于x86 / AMD64的强大反汇编程序库
disassembler反汇编libdisasmA disassembler library.一个反汇编程序库。
disassembler反汇编liefLibrary to Instrument Executable Formats.库到仪器可执行格式。
disassembler反汇编marc4dasmThis python-based tool is a disassembler for the Atmel MARC4 (a 4 bit Harvard micro).这个基于python的工具是Atmel MARC4(一个4位哈佛微型)的反汇编程序。
disassembler反汇编plasmaAn interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.用于x86 / ARM / MIPS的交互式反汇编程序。它可以生成带有彩色语法的缩进伪代码。
disassembler反汇编pwntoolsCTF framework and exploit development library.CTF框架和漏洞利用开发库。
disassembler反汇编redasmInteractive, multiarchitecture disassembler written in C++ using Qt5 as UI Framework.使用Qt5作为UI Framework以C ++编写的交互式多体系结构反汇编程序。
disassembler反汇编scratchabitEasily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API.使用IDAPython兼容的插件API轻松重定向和可破解的交互式反汇编程序。
disassembler反汇编smaliAssembler/disassembler for Android's dex formatAndroid的dex格式的汇编程序/反汇编程序
disassembler反汇编unstripELF Unstrip Tool.ELF Unstrip工具。
disassembler反汇编viperA Binary analysis framework.二进制分析框架。
dosDOS42zipRecursive Zip archive bomb.递归Zip档案炸弹。
dosDOSblacknurseA low bandwidth ICMP attack that is capable of doing denial of service to well known firewalls.低带宽ICMP攻击,能够对众所周知的防火墙进行拒绝服务。
dosDOSbonesiThe DDoS Botnet Simulator.DDoS僵尸网络模拟器。
dosDOSdavosetA tool for using Abuse of Functionality and XML External Entities vulnerabilities on some websites to attack other websites.在某些网站上使用滥用功能和XML外部实体漏洞攻击其他网站的工具。
dosDOSdnsdrdosProof of concept code for distributed DNS reflection DoS.分布式DNS反射DoS的概念代码证明。
dosDOSgoldeneyeA HTTP DoS test tool. Attack Vector exploited: HTTP Keep Alive + NoCache.HTTP DoS测试工具。攻击向量被利用:HTTP Keep Alive + NoCache。
dosDOShulkA webserver DoS tool (Http Unbearable Load King) ported to Go with some additional features.一个Web服务器DoS工具(Http Unbearable Load King)移植到Go,带有一些额外的功能。
dosDOShwkCollection of packet crafting and wireless network flooding tools数据包制作和无线网络泛滥工具的集合
dosDOSiaxfloodIAX flooder.IAX flooder。
dosDOSinvitefloodFlood a device with INVITE requests使用INVITE请求泛洪设备
dosDOSmausezahnA free fast traffic generator written in C which allows you to send nearly every possible and impossible packet.一个用C语言编写的免费快速流量生成器,它允许您发送几乎所有可能和不可能的数据包。
dosDOSnetwork-app-stress-testerNetwork Application Stress Testing Yammer.网络应用压力测试Yammer。
dosDOSnkiller2A TCP exhaustion/stressing tool.TCP耗尽/压力工具。
dosDOSntpdosCreate a DDOS attack using NTP servers.使用NTP服务器创建DDOS攻击。
dosDOSphpstressA PHP denial of service / stress test for Web Servers running PHP-FPM or PHP-CGI.运行PHP-FPM或PHP-CGI的Web服务器的PHP拒绝服务/压力测试。
dosDOSpwnlorisAn improved slowloris DOS tool which keeps attacking until the server starts getting exhausted.一个改进的slowloris DOS工具,它一直保持攻击,直到服务器开始耗尽。
dosDOSshitfloodA Socks5 clone flooder for the Internet Relay Chat (IRC) protocol.用于Internet中继聊天(IRC)协议的Socks5克隆flooder。
dosDOSsiegeAn http regression testing and benchmarking utility一个http回归测试和基准测试实用程序
dosDOSslowhttptestHighly configurable tool that simulates some Application Layer Denial of Service (DoS) attacks高度可配置的工具,可模拟某些应用层拒绝服务(DoS)攻击
dosDOSslowlorisA tool which is written in perl to test http-server vulnerabilites for connection exhaustion denial of service (DoS) attacks so you can enhance the security of your webserver.用于编写用于连接耗尽拒绝服务(DoS)攻击的http-server漏洞的工具,以便您可以增强Web服务器的安全性。
dosDOSslowloris-pyLow bandwidth DoS tool.低带宽DoS工具。
dosDOSsynfloodA very simply script to illustrate DoS SYN Flooding attack.一个非常简单的脚本来说明DoS SYN Flooding攻击。
dosDOSt50Experimental Multi-protocol Packet Injector Tool.实验性多协议包注入工具。
dosDOStcgetkeyA set of tools that deal with acquiring physical memory dumps via FireWire and then scan the memory dump to locate TrueCrypt keys and finally decrypt the encrypted TrueCrypt container using the keys.一组工具,用于处理通过FireWire获取物理内存转储,然后扫描内存转储以找到TrueCrypt密钥,最后使用密钥解密加密的TrueCrypt容器。
dosDOSthc-ssl-dosA tool to verify the performance of SSL. To be used in your authorized and legitimate area ONLY. You need to accept this to make use of it, no use for bad intentions, you have been warned!用于验证SSL性能的工具。仅在您的授权和合法区域使用。你需要接受这个来利用它,没有用于恶意,你已被警告过!
dosDOStorshammerA slow POST Denial of Service testing tool written in Python.用Python编写的慢速POST拒绝服务测试工具。
dosDOSufonetA tool designed to launch DDoS attacks against a target, using 'Open Redirect' vectors on third party web applications, like botnet.一种旨在针对目标发起DDoS攻击的工具,使用僵尸网络等第三方Web应用程序上的“Open Redirect”向量。
dosDOSwreckuestsYet another one hard-hitting tool to run DDoS atacks with HTTP-flood.另一个用HTTP-flood运行DDoS攻击的强硬工具。
drone无人机crozonoA modular framework designed to automate the penetration testing of wireless networks from drones and such unconventional devices.模块化框架,旨在自动化无人机和此类非常规设备的无线网络渗透测试。
drone无人机missionplannerA GroundControl Station for Ardupilot.Ardupilot的GroundControl站。
drone无人机skyjackTakes over Parrot drones, deauthenticating their true owner and taking over control, turning them into zombie drones under your own control.接管鹦鹉无人机,取消其真正的拥有者并取代控制权,将它们变成你自己控制下的僵尸无人机。
drone无人机snoopy-ngA distributed, sensor, data collection, interception, analysis, and visualization framework.分布式,传感器,数据收集,拦截,分析和可视化框架。
exploitation开发aggroargsBruteforce commandline buffer overflows, linux, aggressive arguments.Bruteforce命令行缓冲区溢出,linux,激进的参数。
exploitation开发angropA rop gadget finder and chain builder.一个rop小工具查找器和链构建器。
exploitation开发armitageA graphical cyber attack management tool for Metasploit.Metasploit的图形网络攻击管理工具。
exploitation开发armorA simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.一个简单的Bash脚本,旨在创建能够逃避防病毒扫描程序的加密macOS有效负载。
exploitation开发armscgenARM Shellcode Generator (Mostly Thumb Mode).ARM Shellcode Generator(主要是Thumb模式)。
exploitation开发arpoisonThe UNIX arp cache update utilityUNIX arp缓存更新实用程序
exploitation开发autosploitAutomate the exploitation of remote hosts.自动利用远程主机。
exploitation开发bad-pdfSteal NTLM Hashes with Bad-PDF.使用Bad-PDF窃取NTLM哈希值。
exploitation开发bedCollection of scripts to test for buffer overflows, format string vulnerabilities.收集脚本以测试缓冲区溢出,格式化字符串漏洞。
exploitation开发beefThe Browser Exploitation Framework that focuses on the web browser.浏览器开发框架,专注于Web浏览器。
exploitation开发bfbtesterPerforms checks of single and multiple argument command line overflows and environment variable overflows执行单个和多个参数命令行溢出和环境变量溢出的检查
exploitation开发binexFormat String exploit building tool.格式字符串利用构建工具。
exploitation开发bitdumpA tool to extract database data from a blind SQL injection vulnerability.从盲SQL注入漏洞中提取数据库数据的工具。
exploitation开发blind-sql-bitshiftingA blind SQL injection module that uses bitshfting to calculate characters.盲目SQL注入模块,使用bitshfting来计算字符。
exploitation开发bowcasterA framework intended to aid those developing exploits.旨在帮助那些开发漏洞的框架。
exploitation开发brosecAn interactive reference tool to help security professionals utilize useful payloads and commands.一种交互式参考工具,可帮助安全专业人员利用有用的负载和命令。
exploitation开发chw00tUnices chroot breaking tool.Unices chroot破解工具。
exploitation开发cisco-global-exploiterA perl script that targets multiple vulnerabilities in the Cisco Internetwork Operating System (IOS) and Catalyst products.一个perl脚本,针对思科互联网络操作系统(IOS)和Catalyst产品中的多个漏洞。
exploitation开发cisco-torchCisco Torch mass scanning, fingerprinting, and exploitation tool.Cisco Torch质量扫描,指纹识别和开发工具。
exploitation开发cve-searchA tool to perform local searches for known vulnerabilities.用于执行已知漏洞的本地搜索的工具。
exploitation开发darkd0rk3rPython script that performs dork searching and searches for local file inclusion and SQL injection errors.执行dork搜索并搜索本地文件包含和SQL注入错误的Python脚本。
exploitation开发darkmysqliMulti-Purpose MySQL Injection Tool多用途MySQL注入工具
exploitation开发darkspiritzA penetration testing framework for Linux, MacOS, and Windows systems.适用于Linux,MacOS和Windows系统的渗透测试框架。
exploitation开发deloreanNTP Main-in-the-Middle tool.NTP Main-in-the-Middle工具。
exploitation开发dkmcDont kill my cat - Malicious payload evasion tool.不要杀我的猫 - 恶意有效载荷逃避工具。
exploitation开发dotdotpwnThe Transversal Directory Fuzzer横向目录模糊器
exploitation开发dr-checkerA Soundy Vulnerability Detection Tool for Linux Kernel Drivers.适用于Linux内核驱动程序的Soundy漏洞检测工具。
exploitation开发drinkmeA shellcode testing harness.shellcode测试工具。
exploitation开发encodeshellcodeThis is an encoding tool for 32-bit x86 shellcode that assists a researcher when dealing with character filter or byte restrictions in a buffer overflow vulnerability or some kind of IDS/IPS/AV blocking your code.这是一个32位x86 shellcode的编码工具,可以帮助研究人员处理缓冲区溢出漏洞中的字符过滤器或字节限制或某种IDS / IPS / AV阻止您的代码。
exploitation开发enteletaorMessage Queue & Broker Injection tool that implements attacks to Redis, RabbitMQ and ZeroMQ.Message Queue&Broker Injection工具,可以对Redis,RabbitMQ和ZeroMQ实施攻击。
exploitation开发exploit-dbThe Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software - A collection of hacks漏洞利用数据库(EDB) - 漏洞和易受攻击软件的终极存档 - 黑客攻击的集合
exploitation开发exploitdbOffensive Security’s Exploit Database Archive攻击性安全的漏洞利用数据库存档
exploitation开发exploitpackExploit Pack - The next generation exploit framework.Exploit Pack - 下一代漏洞利用框架。
exploitation开发eyepwnExploit for Eye-Fi Helper directory traversal vulnerability利用Eye-Fi Helper目录遍历漏洞
exploitation开发fimapA little tool for local and remote file inclusion auditing and exploitation一个用于本地和远程文件包含审计和利用的小工具
exploitation开发firstexecutionA Collection of different ways to execute code outside of the expected entry points.在预期入口点之外执行代码的不同方法的集合。
exploitation开发formatstringexploiterHelper script for working with format string bugs.用于处理格式字符串错误的帮助程序脚本。
exploitation开发fs-exploitFormat string exploit generation.格式字符串漏洞生成。
exploitation开发getsploitCommand line utility for searching and downloading exploits.用于搜索和下载漏洞利用的命令行实用程序。
exploitation开发ghostdeliveryPython script to generate obfuscated .vbs script that delivers payload (payload dropper) with persistence and windows antivirus disabling functions.用于生成混淆.vbs脚本的Python脚本,该脚本使用持久性和Windows防病毒禁用功能来提供有效负载(有效负载管理器)。
exploitation开发hackredisA simple tool to scan and exploit redis servers.一个扫描和利用redis服务器的简单工具。
exploitation开发hamsterTool for HTTP session sidejacking.用于HTTP会话sidejacking的工具。
exploitation开发hcraftHTTP Vuln Request CrafterHTTP Vuln请求Crafter
exploitation开发heartleechScans for systems vulnerable to the heartbleed bug, and then download them.扫描容易受到心脏病的系统,然后下载它们。
exploitation开发hqlmapA tool to exploit HQL Injections.一种利用HQL注入的工具。
exploitation开发htexploitA Python script that exploits a weakness in the way that .htaccess files can be configured to protect a web directory with an authentication process一个Python脚本,利用.htaccess文件可以配置为通过身份验证过程保护Web目录的方式的弱点
exploitation开发htshellsSelf contained web shells and other attacks via .htaccess files.通过.htaccess文件自包含Web shell和其他攻击。
exploitation开发inceptionA FireWire physical memory manipulation and hacking tool exploiting IEEE 1394 SBP DMA.利用IEEE 1394 SBP DMA的FireWire物理内存操作和黑客工具。
exploitation开发insanityGenerate Payloads and Control Remote Machines .生成有效负载和控制远程计算机。
exploitation开发irpasInternetwork Routing Protocol Attack Suite.网络路由协议攻击套件。
exploitation开发isfAn exploitation framework based on Python.一个基于Python的开发框架。
exploitation开发jboss-autopwnA JBoss script for obtaining remote shell access.用于获取远程shell访问的JBoss脚本。
exploitation开发katanaA framework that seekss to unite general auditing tools, which are general pentesting tools (Network,Web,Desktop and others).寻求统一通用审计工具的框架,这些工具是一般的测试工具(网络,Web,桌面等)。
exploitation开发kernelpopKernel privilege escalation enumeration and exploitation framework.内核权限升级枚举和开发框架。
exploitation开发killcastManipulate Chromecast Devices in your Network.处理网络中的Chromecast设备。
exploitation开发killerbeeFramework and tools for exploiting ZigBee and IEEE 802.15.4 networks.利用ZigBee和IEEE 802.15.4网络的框架和工具。
exploitation开发l0lThe Exploit Development Kit.漏洞利用开发套件。
exploitation开发leroy-jenkinsA python tool that will allow remote execution of commands on a Jenkins server and its nodes.一个python工具,允许在Jenkins服务器及其节点上远程执行命令。
exploitation开发lfi-autopwnA Perl script to try to gain code execution on a remote server via LFI一个Perl脚本,尝试通过LFI在远程服务器上获取代码
exploitation开发lisa.pyAn Exploit Dev Swiss Army Knife.Exploit Dev瑞士军刀。
exploitation开发metasploitAdvanced open-source platform for developing, testing, and using exploit code用于开发,测试和使用漏洞利用代码的高级开源平台
exploitation开发minimysqlatorA multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities.用于审核网站以发现和利用SQL注入漏洞的多平台应用程序。
exploitation开发miranda-upnpA Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices基于Python的通用Plug-N-Play客户端应用程序,旨在发现,查询和与UPNP设备交互
exploitation开发mitmfA Framework for Man-In-The-Middle attacks written in Python.用Python编写的中间人攻击框架。
exploitation开发mosquitoXSS exploitation tool - access victims through HTTP proxy.XSS开发工具 - 通过HTTP代理访问受害者。
exploitation开发opensvpA security tool implementing "attacks" to be able to the resistance of firewall to protocol level attack.实施“攻击”的安全工具,能够抵御防火墙对协议级别的攻击。
exploitation开发osuetaA simple Python script to exploit the OpenSSH User Enumeration Timing Attack.一个简单的Python脚本来利用OpenSSH用户枚举时间攻击。
exploitation开发otoriA python-based toolbox intended to allow useful exploitation of XML external entity ("XXE") vulnerabilities.一个基于python的工具箱,旨在允许有用地利用XML外部实体(“XXE”)漏洞。
exploitation开发owasp-zscShellcode/Obfuscate Code Generator.Shellcode / Obfuscate代码生成器。
exploitation开发padbusterAutomated script for performing Padding Oracle attacks.用于执行Padding Oracle攻击的自动脚本。
exploitation开发pathzuzuChecks for PATH substitution vulnerabilities and logs the commands executed by the vulnerable executables.检查PATH替换漏洞并记录易受攻击的可执行文件执行的命令。
exploitation开发pblindLittle utility to help exploiting blind sql injection vulnerabilities.用于帮助利用盲sql注入漏洞的小实用程序。
exploitation开发piranaExploitation framework that tests the security of a email content filter.用于测试电子邮件内容过滤器安全性的漏洞利用框架。
exploitation开发pmcmaAutomated exploitation of invalid memory writes (being them the consequences of an overflow in a writable section, of a missing format string, integer overflow, variable misuse, or any other type of memory corruption).自动利用无效的内存写入(因为它们是可写部分溢出,丢失格式字符串,整数溢出,可变误用或任何其他类型的内存损坏的后果)。
exploitation开发pocsuiteAn open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.由Knownsec安全团队开发的开源远程漏洞测试框架。
exploitation开发pompemA python exploit tool finder.一个python漏洞利用工具查找器。
exploitation开发powersploitA PowerShell Post-Exploitation Framework.PowerShell后利用漏洞框架。
exploitation开发preenySome helpful preload libraries for pwning stuff.一些有用的预装库用于计算内容。
exploitation开发pretPrinter Exploitation Toolkit - The tool that made dumpster diving obsolete.Printer Exploitation Toolkit - 使垃圾箱潜水过时的工具。
exploitation开发ps1encodeA tool to generate and encode a PowerShell based Metasploit payloads.用于生成和编码基于PowerShell的Metasploit有效负载的工具。
exploitation开发ptfThe Penetration Testers Framework: Way for modular support for up-to-date tools.渗透测试仪框架:模块化支持最新工具的方法。
exploitation开发pykekKerberos Exploitation Kit.Kerberos开发套件。
exploitation开发rebindDNS Rebinding ToolDNS重新绑定工具
exploitation开发rexShellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.Shellphish的自动化开发引擎,最初是为Cyber​​ Grand Challenge创建的。
exploitation开发rextRouter EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.Router EXploitation Toolkit - 一个小工具包,可以轻松创建和使用与嵌入式设备配合使用的各种python脚本。
exploitation开发rfcatRF ChipCon-based Attack Toolset.基于RF ChipCon的攻击工具集。
exploitation开发ropemeA set of python scripts to generate ROP gadgets and payload.一组用于生成ROP小工具和有效负载的python脚本。
exploitation开发ropgadgetSearch gadgets in binaries to facilitate ROP exploitation for several file formats and architectures在二进制文件中搜索小工具以促进对多种文件格式和体系结构的ROP利用
exploitation开发ropgadget2Search gadgets in binaries to facilitate ROP exploitation for several file formats and architectures在二进制文件中搜索小工具以促进对多种文件格式和体系结构的ROP利用
exploitation开发ropperShow information about binary files and find gadgets to build rop chains for different architectures显示有关二进制文件的信息并查找小工具以构建不同体系结构的rop链
exploitation开发roputilsA Return-oriented Programming toolkit.面向返回的编程工具包。
exploitation开发routersploitOpen-source exploitation framework dedicated to embedded devices专用于嵌入式设备的开源开发框架
exploitation开发rpA full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries.一个完整的cpp编写工具,旨在在PE / Elf / Mach-O x86 / x64二进制文件中查找ROP序列。
exploitation开发rspetA Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.基于Python的反向shell,具有协助后期利用场景的功能。
exploitation开发sc-makeTool for automating shellcode creation.用于自动创建shellcode的工具。
exploitation开发scansploitExploit using barcodes, QRcodes, earn13, datamatrix.利用条形码,QR码,赚13,数据矩阵进行利用。
exploitation开发sensepost-xrdpA rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions.用于X11协议的基本远程桌面工具,利用未经身份验证的x11会话。
exploitation开发serialbruteJava serialization brute force attack tool.Java序列化暴力攻击工具。
exploitation开发shellcode-factoryTool to create and test shellcodes from custom assembly sources.从自定义程序集源创建和测试shellcode的工具。
exploitation开发shellcodecsA collection of shellcode, loaders, sources, and generators provided with documentation designed to ease the exploitation and shellcode programming process.一系列shellcode,加载器,源代码和生成器,提供了旨在简化利用和shellcode编程过程的文档。
exploitation开发shellenInteractive shellcoding environment to easily craft shellcodes.交互式shellcoding环境,可轻松制作shellcode。
exploitation开发shellmeBecause sometimes you just need shellcode and opcodes quickly. This essentially just wraps some nasm/objdump calls into a neat script.因为有时你只需要快速获得shellcode和操作码。这基本上只是将一些nasm / objdump调用包装成一个简洁的脚本。
exploitation开发shellsploit-frameworkNew Generation Exploit Development Kit.新一代漏洞利用开发套件。
exploitation开发shellterA dynamic shellcode injection tool, and the first truly dynamic PE infector ever created.动态shellcode注入工具,以及有史以来第一个真正动态的PE infector。
exploitation开发shockerA tool to find and exploit servers vulnerable to Shellshock.查找和利用易受Shellshock攻击的服务器的工具。
exploitation开发sickleA shellcode development tool, created to speed up the various steps needed to create functioning shellcode.一个shellcode开发工具,用于加速创建正常运行的shellcode所需的各个步骤。
exploitation开发sigploitTelecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP.电信信令开发框架 - SS7,GTP,Diameter和SIP。
exploitation开发sigthiefStealing Signatures and Making One Invalid Signature at a Time.窃取签名并一次制作一个无效签名。
exploitation开发sjetSiberas JMX exploitation toolkit.Siberas JMX利用工具包。
exploitation开发smapShellcode mapper - Handy tool for shellcode analysis.Shellcode mapper - 用于shellcode分析的便捷工具。
exploitation开发snarf-mitmSMB Man in the Middle Attack Engine / relay suite.中级攻击引擎/中继套件中的SMB人员。
exploitation开发sqlninjaA tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.一种工具,旨在利用使用Microsoft SQL Server作为后端的Web应用程序上的SQL注入漏洞。
exploitation开发sqlsusAn open source MySQL injection and takeover tool, written in perl一个开源的MySQL注入和接管工具,用perl编写
exploitation开发ssh-mitmSSH man-in-the-middle tool.SSH man-in-the-middle工具。
exploitation开发stackflowUniversal stack-based buffer overfow exploitation tool.基于通用堆栈的缓冲区overfow开发工具。
exploitation开发staekkaThis plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access.这个插件扩展了Metasploit的一些缺失功能和模块,允许与其他/自定义漏洞/获取shell访问的方式进行交互。
exploitation开发subterfugeAutomated Man-in-the-Middle Attack Framework自动化中间人攻击框架
exploitation开发tcpjunkA general tcp protocols testing and hacking utility.一般的tcp协议测试和黑客实用程序。
exploitation开发tomcatwardeployerApache Tomcat auto WAR deployment & pwning penetration testing tool.Apache Tomcat自动WAR部署和pwning渗透测试工具。
exploitation开发unibruteMultithreaded SQL union bruteforcer.多线程SQL联合bruteforcer。
exploitation开发viproy-voipkitVoIP Pen-Test Kit for Metasploit FrameworkMetasploit框架的VoIP笔测试工具包
exploitation开发vmapA Vulnerability-Exploit desktop finder.漏洞利用漏洞利用程序。
exploitation开发webexploitationtoolA cross platform web exploitation toolkit.跨平台Web开发工具包。
exploitation开发websploitAn Open Source Project For, Social Engineering Works, Scan, Crawler & Analysis Web, Automatic Exploiter, Support Network Attacks一个开源项目,社交工程,扫描,爬虫和分析Web,自动漏洞利用,支持网络攻击
exploitation开发wesngWindows Exploit Suggester - Next Generation.Windows漏洞利用建议器 - 下一代。
exploitation开发wildpwnUnix wildcard attacks.Unix通配符攻击。
exploitation开发wsuspect-proxyA tool for MITM'ing insecure WSUS connections.用于MITM的不安全WSUS连接的工具。
exploitation开发xcatA command line tool to automate the exploitation of blind XPath injection vulnerabilities.一个命令行工具,用于自动利用盲目XPath注入漏洞。
exploitation开发xpl-searchSearch exploits in multiple exploit databases!.在多个漏洞利用数据库中搜索漏洞利用!
exploitation开发xropTool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC.用于为ARM,AARCH64,x86,MIPS,PPC,RISCV,SH4和SPARC生成ROP小工具的工具。
exploitation开发xxeinjectorTool for automatic exploitation of XXE vulnerability using direct and different out of band methods.使用直接和不同的带外方法自动利用XXE漏洞的工具。
exploitation开发yinjectorA MySQL injection penetration tool. It has multiple features, proxy support, and multiple exploitation methods.一个MySQL注入渗透工具。它具有多种功能,代理支持和多种利用方法。
exploitation开发zarpA network attack tool centered around the exploitation of local networks.一种以利用本地网络为中心的网络攻击工具。
exploitation开发zeratoolAutomatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems.自动漏洞利用生成(AEG)和远程标记捕获,用于可利用的CTF问题。
exploitation开发zirikatuFud Payload generator script.Fud Payload生成器脚本。
fingerprint指纹asp-auditAn ASP fingerprinting tool and vulnerability scanner.ASP指纹识别工具和漏洞扫描程序。
fingerprint指纹blindelephantA web application fingerprinter. Attempts to discover the version of a (known) web application by comparing static files at known locationsWeb应用程序指纹识别器。尝试通过比较已知位置的静态文件来发现(已知)Web应用程序的版本
fingerprint指纹cms-explorerDesigned to reveal the specific modules, plugins, components and themes that various cms driven websites are running旨在揭示各种cms驱动的网站正在运行的特定模块,插件,组件和主题
fingerprint指纹complementoA collection of tools for pentester: LetDown is a powerful tcp flooder ReverseRaider is a domain scanner that use wordlist scanning or reverse resolution scanning Httsquash is an http server scanner, banner grabber and data retrieverPentester的一系列工具:LetDown是一个功能强大的tcp flooder ReverseRaider是一个使用wordlist扫描或反向分辨率扫描的域扫描程序Httsquash是一个http服务器扫描程序,横幅抓取器和数据检索器
fingerprint指纹detectemDetect software and its version on websites.在网站上检测软件及其版本。
fingerprint指纹dhcpfPassive DHCP fingerprinting implementation.被动DHCP指纹识别实现。
fingerprint指纹dnsmapPassive DNS network mapper被动DNS网络映射器
fingerprint指纹fl0pA passive L7 flow fingerprinter that examines TCP/UDP/ICMP packet sequences, can peek into cryptographic tunnels, can tell human beings and robots apart, and performs a couple of other infosec-related tricks.一个检测TCP / UDP / ICMP数据包序列的被动L7流指纹器,可以窥视加密隧道,可以分辨人类和机器人,并执行其他一些与信息安全相关的技巧。
fingerprint指纹fpdnsProgram that remotely determines DNS server versions.远程确定DNS服务器版本的程序。
fingerprint指纹ftpmapScans remote FTP servers to identify what software and what versions they are running.扫描远程FTP服务器以识别它们正在运行的软件和版本。
fingerprint指纹htrosbifActive HTTP server fingerprinting and recon tool.主动HTTP服务器指纹识别和侦察工具。
fingerprint指纹httprintA web server fingerprinting tool.Web服务器指纹识别工具。
fingerprint指纹lbmapProof of concept scripts for advanced web application fingerprinting, presented at OWASP AppSecAsia 2012.用于高级Web应用程序指纹识别的概念脚本证明,在OWASP AppSecAsia 2012上展示。
fingerprint指纹mwebfpMass Web Fingerprinter.Mass Web Fingerprinter。
fingerprint指纹neighbor-cache-fingerprinterAn ARP based Operating System version scanner.基于ARP的操作系统版本扫描程序。
fingerprint指纹nimbostratusTools for fingerprintinging and exploiting Amazon cloud infrastructures.用于指纹识别和利用亚马逊云基础架构的工具。
fingerprint指纹ntp-fingerprintAn active fingerprinting utility specifically designed to identify the OS the NTP server is running on.一种主动指纹识别实用程序,专门用于识别运行NTP服务器的操作系统。
fingerprint指纹operativeFramework based on fingerprint action, this tool is used for get information on a website or a enterprise target with multiple modules (Viadeo search,Linkedin search, Reverse email whois, Reverse ip whois, SQL file forensics ...).基于指纹动作的框架,该工具用于获取具有多个模块的网站或企业目标的信息(Viadeo搜索,Linkedin搜索,反向电子邮件whois,反向ip whois,SQL文件取证...)。
fingerprint指纹p0fPurely passive TCP/IP traffic fingerprinting tool纯粹被动的TCP / IP流量指纹识别工具
fingerprint指纹propeciaA fast class scanner that scans for a specified open port with banner grabbing快速类扫描程序,扫描指定的打开端口并抓取横幅
fingerprint指纹scannerlThe modular distributed fingerprinting engine.模块化分布式指纹识别引擎。
fingerprint指纹sinfpA full operating system stack fingerprinting suite.完整的操作系统堆栈指纹套件。
fingerprint指纹smtpmapTool to identify the running smtp software on a given host.用于识别给定主机上正在运行的smtp软件的工具。
fingerprint指纹smtpscanAn SMTP scannerSMTP扫描程序
fingerprint指纹spartanFrontpage and Sharepoint fingerprinting and attack tool.Frontpage和Sharepoint指纹识别和攻击工具。
fingerprint指纹tls-fingerprintingTool and scripts to perform TLS Fingerprinting.用于执行TLS指纹识别的工具和脚本。
fingerprint指纹tls-proberA tool to fingerprint SSL/TLS servers.指纹SSL / TLS服务器的工具。
fingerprint指纹xprobe2An active OS fingerprinting tool.一个活跃的OS指纹识别工具。
fingerprint指纹zgrab2Go Application Layer Scanner.转到应用层扫描器。
firmware固件firmwalkerScript for searching the extracted firmware file system for goodies.用于搜索提取的固件文件系统的脚本。
firmware固件firmware-mod-kitModify firmware images without recompiling.无需重新编译即可修改固件映像。
firmware固件meanalyzerIntel Engine Firmware Analysis Tool.英特尔引擎固件分析工具。
firmware固件uefi-firmware-parserParse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc解析BIOS / Intel ME / UEFI固件相关结构:卷,文件系统,文件等
forensic取证afflibAn extensible open format for the storage of disk images and related forensic information.一种可扩展的开放格式,用于存储磁盘映像和相关的取证信息。
forensic取证aimageA program to create aff-images.一个创建aff-images的程序。
forensic取证airA GUI front-end to dd/dc3dd designed for easily creating forensic images.dd / dc3dd的GUI前端,专为轻松创建取证图像而设计。
forensic取证autopsyThe forensic browser. A GUI for the Sleuth Kit.法医浏览器。Sleuth Kit的GUI。
forensic取证bmap-toolsTool for copying largely sparse files using information from a block map file.使用块映射文件中的信息复制大量稀疏文件的工具。
forensic取证bulk-extractorBulk Email and URL extraction tool.批量电子邮件和URL提取工具。
forensic取证canariMaltego rapid transform development and execution framework.Maltego快速转换开发和执行框架。
forensic取证captipperMalicious HTTP traffic explorer tool.恶意HTTP流量资源管理器工具。
forensic取证casefileThe little brother to Maltego without transforms, but combines graph and link analysis to examine links between manually added data to mind map your informationMaltego的小兄弟没有变换,但结合图形和链接分析来检查手动添加的数据之间的链接,以便思考您的信息
forensic取证chaosmapAn information gathering tool and dns / whois / web server scanner信息收集工具和dns / whois / web服务器扫描程序
forensic取证chntpwOffline NT Password Editor - reset passwords in a Windows NT SAM user database file脱机NT密码编辑器 - 重置Windows NT SAM用户数据库文件中的密码
forensic取证chromefreakA Cross-Platform Forensic Framework for Google Chrome适用于Google Chrome的跨平台取证框架
forensic取证dc3ddA patched version of dd that includes a number of features useful for computer forensics.dd的修补版本,其中包含许多对计算机取证有用的功能。
forensic取证dcflddDCFL (DoD Computer Forensics Lab) dd replacement with hashingDCFL(DoD计算机取证实验室)用哈希替换dd
forensic取证ddrescueGNU data recovery toolGNU数据恢复工具
forensic取证disitoolTool to work with Windows executables digital signatures.使用Windows可执行文件数字签名的工具。
forensic取证dmg2imgA CLI tool to uncompress Apple's compressed DMG files to the HFS+ IMG format用于将Apple的压缩DMG文件解压缩为HFS + IMG格式的CLI工具
forensic取证dumpzillaA forensic tool for firefox.firefox的取证工具。
forensic取证eindeutigExamine the contents of Outlook Express DBX email repository files (forensic purposes)检查Outlook Express DBX电子邮件存储库文件的内容(取证目的)
forensic取证emldumpAnalyze MIME files.分析MIME文件。
forensic取证evtkitFix acquired .evt - Windows Event Log files (Forensics).修复获取的.evt - Windows事件日志文件(取证)。
forensic取证exiv2Exif, Iptc and XMP metadata manipulation library and toolsExif,Iptc和XMP元数据操作库和工具
forensic取证extundeleteUtility for recovering deleted files from ext2, ext3 or ext4 partitions by parsing the journal用于通过解析日志从ext2,ext3或ext4分区恢复已删除文件的实用程序
forensic取证foremostA console program to recover files based on their headers, footers, and internal data structures一个控制台程序,用于根据页眉,页脚和内部数据结构恢复文件
forensic取证fridumpA universal memory dumper using Frida.使用Frida的通用内存转储器。
forensic取证galletaExamine the contents of the IE's cookie files for forensic purposes检查IE的cookie文件的内容以进行取证
forensic取证grokevtA collection of scripts built for reading Windows® NT/2K/XP/2K eventlog files.为读取Windows®NT/ 2K / XP / 2K事件日志文件而构建的脚本集合。
forensic取证guymagerA forensic imager for media acquisition.用于媒体获取的取证成像器。
forensic取证imagemounterCommand line utility and Python package to ease the (un)mounting of forensic disk images.命令行实用程序和Python包,以简化(取消)安装取证磁盘映像。
forensic取证indxparseA Tool suite for inspecting NTFS artifacts.用于检查NTFS工件的工具套件。
forensic取证interrogateA proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system), first and foremost for memory dump analysis and forensic usage.概念验证工具,用于识别二进制材料中的加密密钥(无论目标操作系统如何),首先是内存转储分析和取证使用。
forensic取证iosforensiciOS forensic tool https://www.owasp.org/index.php/Projects/OWASP_iOSForensiciOS取证工具https://www.owasp.org/index.php/Projects/OWASP_iOSForensic
forensic取证ipba2IOS Backup AnalyzerIOS备份分析器
forensic取证iphoneanalyzerAllows you to forensically examine or recover date from in iOS device.允许您从iOS设备中进行法医检查或恢复日期。
forensic取证lazagneAn open source application used to retrieve lots of passwords stored on a local computer.一种开源应用程序,用于检索存储在本地计算机上的大量密码。
forensic取证lfleRecover event log entries from an image by heurisitically looking for record structures.通过heurisitically查找记录结构从映像中恢复事件日志条目。
forensic取证limeaideRemotely dump RAM of a Linux client and create a volatility profile for later analysis on your local host.远程转储Linux客户端的RAM并创建易失性配置文件,以便以后在本地主机上进行分析。
forensic取证loki-scannerSimple IOC and Incident Response Scanner.简单的IOC和事件响应扫描程序。
forensic取证mac-robberA digital investigation tool that collects data from allocated files in a mounted file system.一种数字调查工具,用于从已安装的文件系统中的已分配文件中收集数据。
forensic取证magicrescueFind and recover deleted files on block devices在块设备上查找并恢复已删除的文件
forensic取证make-pdfThis tool will embed javascript inside a PDF document.此工具将javascript嵌入PDF文档中。
forensic取证malheurA tool for the automatic analyze of malware behavior.用于自动分析恶意软件行为的工具。
forensic取证maltegoAn open source intelligence and forensics application, enabling to easily gather information about DNS, domains, IP addresses, websites, persons, etc.一个开源智能和取证应用程序,可以轻松收集有关DNS,域,IP地址,网站,人员等的信息。
forensic取证malwaredetectSubmits a file's SHA1 sum to VirusTotal to determine whether it is a known piece of malware向VirusTotal提交文件的SHA1总和,以确定它是否是已知的恶意软件
forensic取证mboxgrepA small, non-interactive utility that scans mail folders for messages matching regular expressions. It does matching against basic and extended POSIX regular expressions, and reads and writes a variety of mailbox formats.一种小型非交互式实用程序,用于扫描邮件文件夹中是否存在与正则表达式匹 它与基本和扩展的POSIX正则表达式匹配,并读取和写入各种邮箱格式。
forensic取证memdumpDumps system memory to stdout, skipping over holes in memory maps.将系统内存转储到stdout,跳过内存映射中的漏洞。
forensic取证memfetchDumps any userspace process memory without affecting its execution.转储任何用户空间进程内存而不影响其执行。
forensic取证mimipenguinA tool to dump the login password from the current linux user.从当前linux用户转储登录密码的工具。
forensic取证mobiusftAn open-source forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions.一个用Python / GTK编写的开源取证框架,用于管理案例和案例项,为开发扩展提供抽象接口。
forensic取证mp3nemaA tool aimed at analyzing and capturing data that is hidden between frames in an MP3 file or stream, otherwise noted as "out of band" data.一种旨在分析和捕获隐藏在MP3文件或流中的帧之间的数据的工具,否则称为“带外”数据。
forensic取证mxtractMemory Extractor & Analyzer.内存提取器和分析器。
forensic取证naftNetwork Appliance Forensic Toolkit.Network Appliance取证工具包。
forensic取证networkminerA Network Forensic Analysis Tool for advanced Network Traffic Analysis, sniffer and packet analyzer.用于高级网络流量分析,嗅探器和数据包分析器的网络取证分析工具。
forensic取证nfexA tool for extracting files from the network in real-time or post-capture from an offline tcpdump pcap savefile.用于从脱机tcpdump pcap savefile实时或后捕获从网络中提取文件的工具。
forensic取证ntdsxtractActive Directory forensic framework.Active Directory取证框架。
forensic取证parse-evtxA tool to parse the Windows XML Event Log (EVTX) format.一种解析Windows XML事件日志(EVTX)格式的工具。
forensic取证pascoExamines the contents of Internet Explorer's cache files for forensic purposes检查Internet Explorer缓存文件的内容以进行取证
forensic取证pcapxrayA Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction.网络取证工具 - 将数据包捕获脱机可视化为包含设备标识的网络图,突出显示重要的通信和文件提取。
forensic取证pdf-parserParses a PDF document to identify the fundamental elements used in the analyzed file.解析PDF文档以识别分析文件中使用的基本元素。
forensic取证pdfbook-analyzerUtility for facebook memory forensics.用于facebook内存取证的实用程序。
forensic取证pdfidScan a file to look for certain PDF keywords.扫描文件以查找某些PDF关键字。
forensic取证pdfresurrectA tool aimed at analyzing PDF documents.一种旨在分析PDF文档的工具。
forensic取证peepdfA Python tool to explore PDF files in order to find out if the file can be harmful or not用于探索PDF文件的Python工具,以确定文件是否有害
forensic取证perl-image-exiftoolReader and rewriter of EXIF informations that supports raw files支持原始文件的EXIF信息的读取器和重写器
forensic取证pevCommand line based tool for PE32/PE32+ file analysis.基于命令行的PE32 / PE32 +文件分析工具。
forensic取证python-rekallMemory Forensic Framework.记忆取证框架。
forensic取证python2-rekallMemory Forensic Framework.记忆取证框架。
forensic取证recoverjpegRecover jpegs from damaged devices.从受损设备中恢复jpeg。
forensic取证recuperabitA tool for forensic file system reconstruction.用于取证文件系统重建的工具。
forensic取证reglookupCommand line utility for reading and querying Windows NT registries用于读取和查询Windows NT注册表的命令行实用程序
forensic取证rekallMemory Forensic Framework.记忆取证框架。
forensic取证replayproxyForensic tool to replay web-based attacks (and also general HTTP traffic) that were captured in a pcap file.用于重放在pcap文件中捕获的基于Web的攻击(以及常规HTTP流量)的取证工具。
forensic取证rifiuti2A rewrite of rifiuti, a great tool from Foundstone folks for analyzing Windows Recycle Bin INFO2 file.重写rifiuti,这是Foundstone人员分析Windows回收站INFO2文件的一个很棒的工具。
forensic取证rkhunterChecks machines for the presence of rootkits and other unwanted tools.检查机器是否存在rootkit和其他不需要的工具。
forensic取证safecopyA disk data recovery tool to extract data from damaged media.磁盘数据恢复工具,用于从损坏的介质中提取数据。
forensic取证scalpelA frugal, high performance file carver.节俭,高性能的文件雕刻师。
forensic取证scrounge-ntfsData recovery program for NTFS file systemsNTFS文件系统的数据恢复程序
forensic取证skypefreakA Cross Platform Forensic Framework for Skype.Skype的跨平台取证框架。
forensic取证sleuthkitFile system and media management forensic analysis tools文件系统和媒体管理取证分析工具
forensic取证swap-diggerA tool used to automate Linux swap analysis during post-exploitation or forensics.用于在后期利用或取证期间自动执行Linux交换分析的工具。
forensic取证tchunt-ngReveal encrypted files stored on a filesystem.显示存储在文件系统上的加密文件。
forensic取证tekdefense-automaterIP URL and MD5 OSINT AnalysisIP URL和MD5 OSINT分析
forensic取证testdiskChecks and undeletes partitions + PhotoRec, signature based recovery tool检查并取消删除分区+ PhotoRec,基于签名的恢复工具
forensic取证thumbcacheviewerExtract Windows thumbcache database files.提取Windows thumbcache数据库文件。
forensic取证tridAn utility designed to identify file types from their binary signatures.用于从二进制签名中识别文件类型的实用程序。
forensic取证truehunterDetect TrueCrypt containers using a fast and memory efficient approach.使用快速且内存有效的方法检测TrueCrypt容器。
forensic取证unhideA forensic tool to find processes hidden by rootkits, LKMs or by other techniques.一种取证工具,用于查找rootkit,LKM或其他技术隐藏的进程。
forensic取证vinettoA forensics tool to examine Thumbs.db files用于检查Thumbs.db文件的取证工具
forensic取证volafoxMac OS X Memory Analysis Toolkit.Mac OS X内存分析工具包。
forensic取证volatilityAdvanced memory forensics framework高级内存取证框架
forensic取证xplicoInternet Traffic Decoder. Network Forensic Analysis Tool (NFAT).互联网流量解码器。网络取证分析工具(NFAT)。
forensic取证zipdumpZIP dump utility.ZIP转储实用程序。
fuzzer模糊器aflSecurity-oriented fuzzer using compile-time instrumentation and genetic algorithms使用编译时仪器和遗传算法的面向安全的模糊器
fuzzer模糊器ajpfuzzerA command-line fuzzer for the Apache JServ Protocol (ajp13).Apache JServ协议(ajp13)的命令行模糊器。
fuzzer模糊器backfuzzA network protocol fuzzing toolkit.网络协议模糊测试工具包。
fuzzer模糊器bfuzzInput based fuzzer tool for browsers.基于输入的浏览器fuzzer工具。
fuzzer模糊器browser-fuzzerBrowser Fuzzer 3浏览器Fuzzer 3
fuzzer模糊器bunnyA closed loop, high-performance, general purpose protocol-blind fuzzer for C programs.用于C程序的闭环,高性能,通用协议盲目模糊器。
fuzzer模糊器burpsuiteAn integrated platform for attacking web applications (free edition).用于攻击Web应用程序的集成平台(免费版)。
fuzzer模糊器choronzonAn evolutionary knowledge-based fuzzer.一种基于知识的进化模糊器。
fuzzer模糊器cirt-fuzzerA simple TCP/UDP protocol fuzzer.一个简单的TCP / UDP协议模糊器。
fuzzer模糊器conscanA blackbox vulnerability scanner for the Concre5 CMS.适用于Concre5 CMS的黑盒漏洞扫描程序。
fuzzer模糊器cookie-cadgerAn auditing tool for Wi-Fi or wired Ethernet connections.用于Wi-Fi或有线以太网连接的审计工具。
fuzzer模糊器crlf-injectorA python script for testing CRLF injecting issues.用于测试CRLF注入问题的python脚本。
fuzzer模糊器dizzyA Python based fuzzing framework with many features.基于Python的模糊测试框架,具有许多功能。
fuzzer模糊器doonaA fork of the Bruteforce Exploit Detector Tool (BED).Bruteforce Exploit Detector Tool(BED)的一个分支。
fuzzer模糊器easyfuzzerA flexible fuzzer, not only for web, has a CSV output for efficient output analysis (platform independant).灵活的模糊器,不仅适用于Web,还具有CSV输出,可进行高效的输出分析(平台无关)。
fuzzer模糊器firewalkAn active reconnaissance network security tool一种主动侦察网络安全工具
fuzzer模糊器flyrBlock-based software vulnerability fuzzing framework.基于块的软件漏洞模糊测试框架。
fuzzer模糊器frisbeeliteA GUI-based USB device fuzzer.基于GUI的USB设备模糊器。
fuzzer模糊器ftesterA tool designed for testing firewall filtering policies and Intrusion Detection System (IDS) capabilities.一种用于测试防火墙过滤策略和入侵检测系统(IDS)功能的工具。
fuzzer模糊器ftp-fuzzThe master of all master fuzzing scripts specifically targeted towards FTP server sofware.所有主要模糊脚本的主人专门针对FTP服务器软件。
fuzzer模糊器fuddlyFuzzing and Data Manipulation Framework (for GNU/Linux).模糊测试和数据操作框架(适用于GNU / Linux)。
fuzzer模糊器fusilA Python library used to write fuzzing programs.用于编写模糊测试程序的Python库。
fuzzer模糊器fuzzball2A little fuzzer for TCP and IP options. It sends a bunch of more or less bogus packets to the host of your choice.TCP和IP选项有点模糊。它会向您选择的主机发送一堆或多或少的虚假数据包。
fuzzer模糊器fuzzdbAttack and Discovery Pattern Dictionary for Application Fault Injection Testing应用故障注入测试的攻击和发现模式字典
fuzzer模糊器fuzzdiffA simple tool designed to help out with crash analysis during fuzz testing. It selectively 'un-fuzzes' portions of a fuzzed file that is known to cause a crash, re-launches the targeted application, and sees if it still crashes.一个简单的工具,旨在帮助在模糊测试期间进行崩溃分析。它选择性地“取消模糊”已知导致崩溃的模糊文件部分,重新​​启动目标应用程序,并查看它是否仍然崩溃。
fuzzer模糊器grrHigh-throughput fuzzer and emulator of DECREE binaries.DECREE二进制文件的高吞吐量模糊器和模拟器。
fuzzer模糊器hexorbaseA database application designed for administering and auditing multiple database servers simultaneously from a centralized location. It is capable of performing SQL queries and bruteforce attacks against common database servers (MySQL, SQLite, Microsoft SQL Server, Oracle, PostgreSQL).一种数据库应用程序,用于从集中位置同时管理和审核多个数据库服务器。它能够对常见的数据库服务器(MySQL,SQLite,Microsoft SQL Server,Oracle,PostgreSQL)执行SQL查询和暴力攻击。
fuzzer模糊器hodorA general-use fuzzer that can be configured to use known-good input and delimiters in order to fuzz specific locations.通用型模糊器,可配置为使用已知良好的输入和分隔符以模糊特定位置。
fuzzer模糊器honggfuzzA general-purpose fuzzer with simple, command-line interface.具有简单命令行界面的通用模糊器。
fuzzer模糊器http-fuzzA simple http fuzzer.一个简单的http模糊器。
fuzzer模糊器ifuzzA binary file fuzzer with several options.带有多个选项的二进制文件模糊器。
fuzzer模糊器ikeproberTool crafting IKE initiator packets and allowing many options to be manually set. Useful to find overflows, error conditions and identifiyng vendors工具制作IKE启动程序数据包并允许手动设置许多选项。用于查找溢出,错误条件和识别供应商
fuzzer模糊器jbrofuzzWeb application protocol fuzzer that emerged from the needs of penetration testing.从渗透测试的需求出现的Web应用程序协议模糊器。
fuzzer模糊器kitty-frameworkFuzzing framework written in python.用python编写的模糊框架。
fuzzer模糊器malybuzzA Python tool focused in discovering programming faults in network software.一个Python工具,专注于发现网络软件中的编程错误。
fuzzer模糊器melkorAn ELF fuzzer that mutates the existing data in an ELF sample given to create orcs (malformed ELFs), however, it does not change values randomly (dumb fuzzing), instead, it fuzzes certain metadata with semi-valid values through the use of fuzzing rules (knowledge base).ELF模糊器改变ELF样本中的现有数据,用于创建orcs(格式错误的ELF),但是,它不会随机更改值(哑模糊),而是通过使用模糊测试将某些元数据模糊为半有效值规则(知识库)。
fuzzer模糊器notspikefileA Linux based file format fuzzing tool基于Linux的文件格式模糊测试工具
fuzzer模糊器oatA toolkit that could be used to audit security within Oracle database servers.可用于审核Oracle数据库服务器内安全性的工具包。
fuzzer模糊器ohrwurmA small and simple RTP fuzzer.一个小而简单的RTP模糊器。
fuzzer模糊器oscannerAn Oracle assessment framework developed in Java.用Java开发的Oracle评估框架。
fuzzer模糊器peachA SmartFuzzer that is capable of performing both generation and mutation based fuzzing.SmartFuzzer,能够执行基于生成和基于突变的模糊测试。
fuzzer模糊器peach-fuzzSimple vulnerability scanning framework.简单的漏洞扫描框架。
fuzzer模糊器pentboxA security suite that packs security and stability testing oriented tools for networks and systems.一种安全套件,包含面向网络和系统的安全性和稳定性测试导向工具。
fuzzer模糊器portmanteauAn experimental unix driver IOCTL security tool that is useful for fuzzing and discovering device driver attack surface.一个实验性的unix驱动程序IOCTL安全工具,可用于模糊测试和发现设备驱动程序攻击面。
fuzzer模糊器powerfuzzerPowerfuzzer is a highly automated web fuzzer based on many other Open Source fuzzers available (incl. cfuzzer, fuzzled, fuzzer.pl, jbrofuzz, webscarab, wapiti, Socket Fuzzer). It can detect XSS, Injections (SQL, LDAP, commands, code, XPATH) and others.Powerfuzzer是一款高度自动化的网络模糊器,基于许多其他开源模糊器(包括cfuzzer,fuzzled,fuzzer.pl,jbrofuzz,webscarab,wapiti,Socket Fuzzer)。它可以检测XSS,注入(SQL,LDAP,命令,代码,XPATH)等。
fuzzer模糊器profuzzSimple PROFINET fuzzer based on Scapy.基于Scapy的简单PROFINET模糊器。
fuzzer模糊器pulsarProtocol Learning and Stateful Fuzzing.协议学习和状态模糊测试。
fuzzer模糊器pyjfuzzPython JSON Fuzzer.Python JSON Fuzzer。
fuzzer模糊器radamsaGeneral purpose mutation based fuzzer基于通用变异的模糊器
fuzzer模糊器ratproxyA passive web application security assessment tool被动Web应用程序安全评估工具
fuzzer模糊器s3-fuzzerA concurrent, command-line AWS S3 Fuzzer.并发命令行AWS S3 Fuzzer。
fuzzer模糊器sandsifterThe x86 processor fuzzer.x86处理器模糊器。
fuzzer模糊器sfuzzA simple fuzzer.一个简单的模糊器。
fuzzer模糊器sloth-fuzzerA smart file fuzzer.一个智能文件模糊器。
fuzzer模糊器smtp-fuzzSimple smtp fuzzer.简单的smtp模糊器。
fuzzer模糊器snmp-fuzzerSNMP fuzzer uses Protos test cases with an entirely new engine written in Perl.SNMP模糊器使用Protos测试用例和一个用Perl编写的全新引擎。
fuzzer模糊器socketfuzzSimple socket fuzzer.简单的插座模糊器。
fuzzer模糊器spiderpig-pdffuzzerA javascript pdf fuzzer一个javascript pdf模糊器
fuzzer模糊器spike-fuzzerIMMUNITYsec's fuzzer creation kit in C.IMMUNITYsec在C中的模糊创建工具包
fuzzer模糊器sploitegoMaltego Penetration Testing Transforms.Maltego渗透测试转换。
fuzzer模糊器sqlbruteBrute forces data out of databases using blind SQL injection.使用盲SQL注入从数据库中强制数据。
fuzzer模糊器sulleyA pure-python fully automated and unattended fuzzing framework.纯python全自动和无人值守的模糊测试框架。
fuzzer模糊器taofTaof is a GUI cross-platform Python generic network protocol fuzzer.Taof是一个GUI跨平台的Python通用网络协议模糊器。
fuzzer模糊器tcpcontrol-fuzzer2^6 TCP control bit fuzzer (no ECN or CWR).2 ^ 6 TCP控制位模糊器(无ECN或CWR)。
fuzzer模糊器termineterSmart meter testing framework智能电表测试框架
fuzzer模糊器tftp-fuzzMaster TFTP fuzzing script as part of the ftools series of fuzzers.硕士TFTP模糊测试脚本作为ftools系列模糊器的一部分。
fuzzer模糊器thefuzzCLI fuzzing tool.CLI fuzzing工具。
fuzzer模糊器trinityA Linux System call fuzzer.Linux系统调用fuzzer。
fuzzer模糊器uniofuzzThe universal fuzzing tool for browsers, web services, files, programs and network services/ports适用于浏览器,Web服务,文件,程序和网络服务/端口的通用模糊测试工具
fuzzer模糊器uniscanA simple Remote File Include, Local File Include and Remote Command Execution vulnerability scanner.一个简单的远程文件包含,本地文件包含和远程命令执行漏洞扫描程序。
fuzzer模糊器w3afWeb Application Attack and Audit Framework.Web应用程序攻击和审计框架。
fuzzer模糊器wapitiA vulnerability scanner for web applications. It currently search vulnerabilities like XSS, SQL and XPath injections, file inclusions, command execution, LDAP injections, CRLF injections...Web应用程序的漏洞扫描程序。它目前正在搜索XSS,SQL和XPath注入,文件包含,命令执行,LDAP注入,CRLF注入等漏洞......
fuzzer模糊器webscarabFramework for analysing applications that communicate using the HTTP and HTTPS protocols用于分析使用HTTP和HTTPS协议进行通信的应用程序的框架
fuzzer模糊器webshagA multi-threaded, multi-platform web server audit tool.一种多线程,多平台的Web服务器审计工具。
fuzzer模糊器wfuzzUtility to bruteforce web applications to find their not linked resources.用于强制Web应用程序查找未链接资源的实用程序。
fuzzer模糊器wsfuzzerA Python tool written to automate SOAP pentesting of web services.一种Python工具,用于自动化Web测试的Web测试。
fuzzer模糊器zzufTransparent application input fuzzer透明应用程序输入模糊器
hardware硬件arduinoArduino prototyping platform SDKArduino原型平台SDK
hardware硬件chipsecPlatform Security Assessment Framework.平台安全评估框架。
hardware硬件dex2jarA tool for converting Android's .dex format to Java's .class format用于将Android的.dex格式转换为Java的.class格式的工具
hardware硬件hdmi-sniffHDMI DDC (I2C) inspection tool. It is designed to demonstrate just how easy it is to recover HDCP crypto keys from HDMI devices.HDMI DDC(I2C)检测工具。它旨在演示从HDMI设备恢复HDCP加密密钥的难易程度。
hardware硬件kautilyaPwnage with Human Interface Devices using Teensy++2.0 and Teensy 3.0 devices.Pwnage与人机接口设备使用Teensy ++ 2.0和Teensy 3.0设备。
hardware硬件pcileechTool, which uses PCIe hardware devices to read and write from the target system memory.工具,它使用PCIe硬件设备从目标系统内存进行读写。
honeypot蜜罐beeswarmHoneypot deployment made easy http://www.beeswarm-ids.org/蜜罐部署变得简单http://www.beeswarm-ids.org/
honeypot蜜罐conpotICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems url="http://conpot.org"ICS蜜罐,旨在收集有关针对工业控制系统的敌人的动机和方法的情报url =“http://conpot.org”
honeypot蜜罐fakeapBlack Alchemy's Fake AP generates thousands of counterfeit 802.11b access points. Hide in plain sight amongst Fake AP's cacophony of beacon frames.Black Alchemy的Fake AP会产生数千个伪造的802.11b接入点。隐藏在假AP的烽火台框架中。
honeypot蜜罐fikedFake IDE daemon假IDE守护进程
honeypot蜜罐heartbleed-honeypotScript that listens on TCP port 443 and responds with completely bogus SSL heartbeat responses, unless it detects the start of a byte pattern similar to that used in Jared Stafford's侦听TCP端口443并以完全伪造的SSL心跳响应进行响应的脚本,除非它检测到类似于Jared Stafford中使用的字节模式的开始
honeypot蜜罐honeydA small daemon that creates virtual hosts on a network.一个在网络上创建虚拟主机的小守护程序。
honeypot蜜罐honeypyA low interaction Honeypot.低交互蜜罐。
honeypot蜜罐honsshA high-interaction Honey Pot solution designed to log all SSH communications between a client and server.高交互性Honey Pot解决方案,用于记录客户端和服务器之间的所有SSH通信。
honeypot蜜罐hpfeedsHoneynet Project generic authenticated datafeed protocol.Honeynet Project通用认证数据馈送协议。
honeypot蜜罐kippoA medium interaction SSH honeypot designed to log brute force attacks and most importantly, the entire shell interaction by the attacker.一种中等交互式SSH蜜罐,用于记录暴力攻击,最重要的是,攻击者进行整个shell交互。
honeypot蜜罐pshittA lightweight fake SSH server designed to collect authentication data sent by intruders.轻量级假SSH服务器,用于收集入侵者发送的身份验证数据。
honeypot蜜罐ssh-honeypotFake sshd that logs ip addresses, usernames, and passwords.记录IP地址,用户名和密码的假sshd。
honeypot蜜罐wifi-honeyA management tool for wifi honeypots.wifi蜜罐的管理工具。
honeypot蜜罐wordpotA Wordpress Honeypot.一个Wordpress蜜罐。
ids入侵检测saganA snort-like log analysis engine.类似snort的日志分析引擎。
keylogger键盘记录logkeysA GNU/Linux keylogger that worked.一个有效的GNU / Linux键盘记录器。
keylogger键盘记录python-keyloggerSimple keystroke logger.简单的击键记录器。
keylogger键盘记录xspyA utility for monitoring keypresses on remote X servers用于监视远程X服务器上的按键的实用程序
malware恶意软件balbuzardA package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc).python中的一套恶意软件分析工具,用于从可疑文件中提取感兴趣的模式(IP地址,域名,已知文件头,有趣的字符串等)。
malware恶意软件bamf-frameworkA modular framework designed to be a platform to launch attacks against botnets.模块化框架,旨在成为针对僵尸网络发起攻击的平台。
malware恶意软件bdlogparserThis is a utility to parse a Bit Defender log file, in order to sort them into a malware archive for easier maintanence of your malware collection.这是一个解析Bit Defender日志文件的实用程序,以便将它们分类为恶意软件存档,以便更轻松地维护您的恶意软件集合。
malware恶意软件box-jsA tool for studying JavaScript malware.用于研究JavaScript恶意软件的工具。
malware恶意软件clamscanlogparserThis is a utility to parse a Clam Anti Virus log file, in order to sort them into a malware archive for easier maintanence of your malware collection.这是一个解析Clam Anti Virus日志文件的实用程序,以便将它们分类为恶意软件存档,以便更轻松地维护您的恶意软件集合。
malware恶意软件cuckooAutomated malware analysis system.自动恶意软件分析系统。
malware恶意软件dammDifferential Analysis of Malware in Memory.内存中恶意软件的差异性分析。
malware恶意软件fakenet-ngNext Generation Dynamic Network Analysis Tool.下一代动态网络分析工具。
malware恶意软件fileintelA modular Python application to pull intelligence about malicious files.模拟Python应用程序,用于提取有关恶意文件的信息。
malware恶意软件flare-flossObfuscated String Solver - Automatically extract obfuscated strings from malware.混淆的字符串解算器 - 自动从恶意软件中提取混淆的字符串。
malware恶意软件fprotlogparserThis is a utility to parse a F-Prot Anti Virus log file, in order to sort them into a malware archive for easier maintanence of your collection.这是一个解析F-Prot反病毒日志文件的实用程序,以便将它们分类为恶意软件存档,以便于维护您的集合。
malware恶意软件gcatA fully featured backdoor that uses Gmail as a C&C server.功能齐全的后门程序,使用Gmail作为C&C服务器。
malware恶意软件malboxesBuilds malware analysis Windows VMs so that you don't have to.构建恶意软件分析Windows VM,以便您不必这样做。
malware恶意软件malscanA Simple PE File Heuristics Scanner.一个简单的PE文件启发式扫描程序。
malware恶意软件maltrieveOriginated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites.起源于mwcrawler的一个分支。它直接从多个站点列出的源检索恶意软件。
malware恶意软件malware-check-toolPython script that detects malicious files via checking md5 hashes from an offline set or via the virustotal site. It has http proxy support and an update feature.Python脚本,通过检查来自脱机集或通过virustotal站点的md5哈希来检测恶意文件。它具有http代理支持和更新功能。
malware恶意软件noribenPortable, Simple, Malware Analysis Sandbox.便携,简单,恶意软件分析沙箱。
malware恶意软件origamiAims at providing a scripting tool to generate and analyze malicious PDF files.旨在提供用于生成和分析恶意PDF文件的脚本工具。
malware恶意软件peframeTool to perform static analysis on (portable executable) malware.用于对(可移植可执行)恶意软件执行静态分析的工具。
malware恶意软件pftriagePython tool and library to help analyze files during malware triage and analysis.Python工具和库,用于在恶意软件分类和分析期间帮助分析文件。
malware恶意软件pyewA python tool to analyse malware.用于分析恶意软件的python工具。
malware恶意软件python2-yaraTool aimed at helping malware researchers to identify and classify malware samples旨在帮助恶意软件研究人员识别和分类恶意软件样本的工具
malware恶意软件seaA tool to help to create exploits of binary programs.一种帮助创建二进制程序漏洞利用的工具。
malware恶意软件ssmaSimple Static Malware Analyzer.简单静态恶意软件分析器。
malware恶意软件thezooA project created to make the possibility of malware analysis open and available to the public.创建一个项目,使恶意软件分析的可能性开放并向公众开放。
malware恶意软件virustotalCommand-line utility to automatically lookup on VirusTotal all files recursively contained in a directory.命令行实用程序,用于在VirusTotal上自动查找递归包含在目录中的所有文件。
malware恶意软件vmcloakAutomated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.杜鹃沙盒的自动虚拟机生成和隐藏真实内容。
malware恶意软件yaraTool aimed at helping malware researchers to identify and classify malware samples旨在帮助恶意软件研究人员识别和分类恶意软件样本的工具
malware恶意软件zerowineMalware Analysis Tool - research project to dynamically analyze the behavior of malware恶意软件分析工具 - 动态分析恶意软件行为的研究项目
misc杂项airgraph-ngGraphing tool for the aircrack suite.用于aircrack套件的图形工具。
misc杂项archiveboxThe open source self-hosted web archive. Takes browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more.开源自托管Web存档。使用浏览器历史/书签/ Pocket / Pinboard /等,保存HTML,JS,PDF,媒体等。
misc杂项aryboManipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions.操纵,规范化和混合布尔算术符号表达式的识别。
misc杂项base64dumpExtract and decode base64 strings from files.从文件中提取和解码base64字符串。
misc杂项bettercap-uiOfficial Bettercap's Web UI.官方Bettercap的Web UI。
misc杂项bokkenGUI for radare2 and pyew.用于radare2和pyew的GUI。
misc杂项centryCold boot & DMA protection冷启动和DMA保护
misc杂项checkibanChecks the validity of an International Bank Account Number (IBAN).检查国际银行帐号(IBAN)的有效性。
misc杂项cisco-router-configTools to copy and merge Cisco Routers Configuration.用于复制和合并Cisco路由器配置的工具。
misc杂项cloakifyData Exfiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Evade AV Detection.平原视野中的数据泄漏; Evade DLP / MLS设备; 分析师社会工程; 避免AV检测。
misc杂项credmapThe Credential mapper - Tool that was created to bring awareness to the dangers of credential reuse.凭据映射器 - 用于提高对凭证重用危险性的认识而创建的工具。
misc杂项crosstool-ngVersatile (cross-)toolchain generator.多功能(交叉)工具链发生器。
misc杂项dartspylruSimple dictionary with LRU behaviour.具有LRU行为的简单字典。
misc杂项dbdA Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32.Netcat克隆,旨在提供便携性并提供强大的加密功能。它运行在类Unix操作系统和Mi​​crosoft Win32上。
misc杂项dhcdropRemove illegal dhcp servers with IP-pool underflow.删除具有IP池下溢的非法dhcp服务器。
misc杂项domlinkA tool to link a domain with registered organisation names and emails, to other domains.用于将域与注册的组织名称和电子邮件链接到其他域的工具。
misc杂项dsdDigital Speech Decoder数字语音解码器
misc杂项elettraEncryption utility by Julia IdentityJulia Identity的加密实用程序
misc杂项elettra-guiGui for the elettra crypto application.Gui为elettra加密应用程序。
misc杂项entPseudorandom number sequence test.伪随机数序列测试。
misc杂项evilgradeModular framework that takes advantage of poor upgrade implementations by injecting fake updates.模块化框架,通过注入虚假更新来利用糟糕的升级实现。
misc杂项exrexIrregular methods on regular expressions.正则表达式的不规则方法。
misc杂项extracthostsExtracts hosts (IP/Hostnames) from files.从文件中提取主机(IP /主机名)。
misc杂项fakemailFake mail server that captures e-mails as files for acceptance testing.假邮件服务器将电子邮件捕获为验证测试​​文件。
misc杂项firefox-security-toolkitA tool that transforms Firefox browsers into a penetration testing suite.一种将Firefox浏览器转换为渗透测试套件的工具。
misc杂项flareFlare processes an SWF and extracts all scripts from it.Flare处理SWF并从中提取所有脚本。
misc杂项genlistGenerates lists of IP addresses.生成IP地址列表。
misc杂项geoipgenGeoIPgen is a country to IP addresses generator.GeoIPgen是IP地址生成器的国家/地区。
misc杂项githubclonerA script that clones Github repositories of users and organizations automatically.一个自动克隆用户和组织的Github存储库的脚本。
misc杂项graffitiA tool to generate obfuscated one liners to aid in penetration testing.生成混淆的一个衬垫以帮助渗透测试的工具。
misc杂项h2specA conformance testing tool for HTTP/2 implementation.用于HTTP / 2实现的一致性测试工具。
misc杂项hashcat-utilsSet of small utilities that are useful in advanced password cracking一组在高级密码破解中有用的小实用程序
misc杂项hexylColored command-line hex viewer彩色命令行十六进制查看器
misc杂项http-putSimple http put perl script.简单的http放入perl脚本。
misc杂项httpscreenshotA tool for grabbing screenshots and HTML of large numbers of websites.用于获取大量网站的屏幕截图和HTML的工具。
misc杂项httrackAn easy-to-use offline browser utility易于使用的离线浏览器实用程序
misc杂项imagegrepGrep word in pdf or image based on OCR.基于OCR的pdf或图像中的grep单词。
misc杂项ipobfuscatorA simple tool to convert the IP to a DWORD IP.一种将IP转换为DWORD IP的简单工具。
misc杂项laudanumA collection of injectable files, designed to be used in a pentest when SQL injection flaws are found and are in multiple languages for different environments.一组可注入文件,设计用于在发现SQL注入漏洞时用于pentest,并且针对不同的环境使用多种语言。
misc杂项leoLiterate programmer's editor, outliner, and project manager.文学程序员的编辑,大纲和项目经理。
misc杂项libpstOutlook .pst file converterOutlook .pst文件转换器
misc杂项magictreeA penetration tester productivity tool designed to allow easy and straightforward data consolidation, querying, external command execution and report generation渗透测试仪生产力工具,旨在实现简单,直接的数据整合,查询,外部命令执行和报告生成
misc杂项mibbleAn open-source SNMP MIB parser (or SMI parser) written in Java. It can be used to read SNMP MIB files as well as simple ASN.1 files.用Java编写的开源SNMP MIB解析器(或SMI解析器)。它可用于读取SNMP MIB文件以及简单的ASN.1文件。
misc杂项minimodemA command-line program which decodes (or generates) audio modem tones at any specified baud rate, using various framing protocols.一种命令行程序,使用各种成帧协议以任何指定的波特率解码(或生成)音频调制解调器音调。
misc杂项mrtparseA module to read and analyze the MRT format data.用于读取和分析MRT格式数据的模块。
misc杂项msfdbManage the metasploit framework database.管理metasploit框架数据库。
misc杂项netkit-rwhoRemote who client and server (with Debian patches).远程谁客户端和服务器(与Debian补丁)。
misc杂项nmap-parse-outputConverts/manipulates/extracts data from a nmap scan output.从nmap扫描输出转换/操作/提取数据。
misc杂项nsearchMinimal script to help find script into the nse database.帮助在nse数据库中找到脚本的最小脚本。
misc杂项onionshareSecurely and anonymously share a file of any size.安全地匿名共享任何大小的文件。
misc杂项plumberA python implementation of a grep friendly ftrace wrapper.grep友好的ftrace包装器的python实现。
misc杂项plutilConverts .plist files between binary and UTF (editable) text formats.在二进制和UTF(可编辑)文本格式之间转换.plist文件。
misc杂项princeprocessorStandalone password candidate generator using the PRINCE algorithm.使用PRINCE算法的独立密码候选生成器。
misc杂项pulledporkSnort rule management.Snort规则管理。
misc杂项pwdlogyA target specific wordlist generating tool for social engineers and security researchers.针对社会工程师和安全研究人员的目标特定词汇表生成工具。
misc杂项pydictorA useful hacker dictionary builder for a brute-force attack.一个有用的黑客字典构建器,用于暴力攻击。
misc杂项pyinstallerA program that converts (packages) Python programs into stand-alone executables, under Windows, Linux, Mac OS X, Solaris and AIX.在Windows,Linux,Mac OS X,Solaris和AIX下将Python程序转换(打包)为独立可执行文件的程序。
misc杂项python-utidylibPython bindings for Tidy HTML parser/cleaner.Tidy HTML解析器/清理器的Python绑定。
misc杂项redpointDigital Bond's ICS Enumeration Tools.Digital Bond的ICS枚举工具。
misc杂项rtfmA database of common, interesting or useful commands, in one handy referable form.一个方便的参考形式的常见,有趣或有用命令的数据库。
misc杂项sasmA simple crossplatform IDE for NASM, MASM, GAS and FASM assembly languages.用于NASM,MASM,GAS和FASM汇编语言的简单跨平台IDE。
misc杂项schnappi-dhcpCan fuck network with no DHCP.他妈的网络没有DHCP。
misc杂项sh00tA Testing Environment for Manual Security Testers.手动安全测试人员的测试环境。
misc杂项shellingAn offensive approach to the anatomy of improperly written OS command injection sanitisers.对不正确编写的OS命令注射杀菌剂的解剖学进攻方法。
misc杂项sleuthqlPython3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.Python3 Burp History解析工具,用于发现潜在的SQL注入点。与SQLmap一起使用。
misc杂项sslcatSSLCat is a simple Unix utility that reads and writes data across an SSL enable network connection.SSLCat是一个简单的Unix实用程序,可以通过SSL启用网络连接读取和写入数据。
misc杂项stompyAn advanced utility to test the quality of WWW session identifiers and other tokens that are meant to be unpredictable.一种高级实用程序,用于测试WWW会话标识符和其他令牌不可预测的令牌的质量。
misc杂项suricata-verifySuricata Verification Tests - Testing Suricata Output.Suricata验证测试 - 测试Suricata输出。
misc杂项tcpxtractA tool for extracting files from network traffic.用于从网络流量中提取文件的工具。
misc杂项tnscmda lame tool to prod the oracle tnslsnr process (1521/tcp)刺激oracle tnslsnr进程的蹩脚工具(1521 / tcp)
misc杂项tpcatTool based upon pcapdiff by the EFF. It will analyze two packet captures (taken on each side of the firewall as an example) and report any packets that were seen on the source capture but didn’t make it to the dest.EFF基于pcapdiff的工具。它将分析两个数据包捕获(以防火墙的每一侧为例)并报告在源捕获中看到但未进入dest的任何数据包。
misc杂项uatesterUser Agent String Tester用户代理字符串测试程序
misc杂项urlviewA curses URL parser for text files.curses文本文件的URL解析器。
misc杂项usernamerPentest Tool to generate usernames/logins based on supplied names.Pentest工具根据提供的名称生成用户名/登录。
misc杂项valabindTool to parse vala or vapi files to transform them into swig interface files, C++, NodeJS-ffi or GIR解析vala或vapi文件的工具,将它们转换为swig接口文件,C ++,NodeJS-ffi或GIR
misc杂项veriniceTool for managing information security.管理信息安全的工具。
misc杂项vfeedOpen Source Cross Linked and Aggregated Local Vulnerability Database main repository.开源交叉链接和聚合本地漏洞数据库主存储库。
misc杂项visualize-logsA Python library and command line tools to provide interactive log visualization.Python库和命令行工具,用于提供交互式日志可视化。
misc杂项web2ldapFull-featured LDAP client running as web application.作为Web应用程序运行的全功能LDAP客户端。
misc杂项whapaWhatsApp Parser Tool.WhatsApp解析器工具。
misc杂项whatportisA command to search port names and numbers.搜索端口名称和数字的命令。
misc杂项winexeRemotely execute commands on Windows NT/2000/XP/2003 systems.在Windows NT / 2000 / XP / 2003系统上远程执行命令。
misc杂项winregfsWindows Registry FUSE filesystem.Windows注册表FUSE文件系统。
misc杂项wol-eA suite of tools for the Wake on LAN feature of network attached computers.一套用于网络连接计算机的Wake on LAN功能的工具。
misc杂项wordlistctlFetch, install and search wordlist archives from websites and torrent peers.从网站和torrent对等方获取,安装和搜索wordlist档案。
misc杂项yayYet another yogurt. Pacman wrapper and AUR helper written in go.另一种酸奶。吃的Pacman包装和AUR帮助。
mobile移动androbugsAn efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications.一款高效的Android漏洞扫描程序,可帮助开发人员或黑客发现Android应用程序中的潜在安全漏洞。
mobile移动androickA python tool to help in forensics analysis on android.一个python工具,可以帮助在android上进行取证分析。
mobile移动android-ndkAndroid C/C++ developer kit.Android C / C ++开发人员套件。
mobile移动android-sdkGoogle Android SDK谷歌Android SDK
mobile移动android-udev-rulesAndroid udev rules.Android udev规则。
mobile移动androidpincrackBruteforce the Android Passcode given the hash and salt.给出哈希和盐的强制执行A​​ndroid密码。
mobile移动androidsnifferA perl script that lets you search for 3rd party passwords, dump the call log, dump contacts, dump wireless configuration, and more.一个perl脚本,可让您搜索第三方密码,转储呼叫日志,转储联系人,转储无线配置等。
mobile移动androwarnYet another static code analyzer for malicious Android applications.另一种用于恶意Android应用程序的静态代码分析器
mobile移动apkidAndroid Application Identifier for Packers, Protectors, Obfuscators and Oddities.包装工,保护装置,混淆器和奇怪的Android应用程序标识符。
mobile移动apkstatAutomated Information Retrieval From APKs For Initial Analysis.来自APK的自动信息检索用于初始分析。
mobile移动appmonA runtime security testing & profiling framework for native apps on macOS, iOS & android and it is built using Frida.适用于macOS,iOS和android上的本机应用程序的运行时安全测试和分析框架,它是使用Frida构建的。
mobile移动backdoor-apkShell script that simplifies the process of adding a backdoor to any Android APK fileShell脚本简化了向任何Android APK文件添加后门的过程
mobile移动backhackTool to perform Android app analysis by backing up and extracting apps, allowing you to analyze and modify file system contents for apps.通过备份和解压缩应用程序来执行Android应用程序分析的工具,允许您分析和修改应用程序的文件系统内容。
mobile移动bandicootA toolbox to analyze mobile phone metadata.用于分析手机元数据的工具箱。
mobile移动cnamulatorA phone CNAM lookup utility using the OpenCNAM API.使用OpenCNAM API的手机CNAM查找实用程序。
mobile移动dexpatcherModify Android DEX/APK files at source-level using Java.使用Java在源级别修改Android DEX / APK文件。
mobile移动drozerA security testing framework for Android - Precompiled binary from official repository.Android的安全测试框架 - 来自官方存储库的预编译二进制文件。
mobile移动findmyiphoneLocates all devices associated with an iCloud account找到与iCloud帐户关联的所有设备
mobile移动idbA tool to simplify some common tasks for iOS pentesting and research.一种简化iOS测试和研究的常见任务的工具。
mobile移动kalibrate-rtlFork of http://thre.at/kalibrate/ for use with rtl-sdr devices.http://thre.at/kalibrate/用于与rtl-sdr设备一起使用的叉子。
mobile移动lazydroidTool written as a bash script to facilitate some aspects of an Android Assessment作为bash脚本编写的工具,用于促进Android评估的某些方面
mobile移动mara-frameworkA Mobile Application Reverse engineering and Analysis Framework.移动应用程序逆向工程和分析框架。
mobile移动mobsfAn intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.智能,一体化的开源移动应用程序(Android / iOS)自动笔测试框架,能够执行静态,动态分析和Web API测试。
mobile移动needleThe iOS Security Testing Framework.iOS安全测试框架。
mobile移动qarkTool to look for several security related Android application vulnerabilities.寻找几个与安全相关的Android应用程序漏洞的工具。
mobile移动signAutomatically signs an apk with the Android test certificate.使用Android测试证书自动签署apk。
mobile移动simplifyGeneric Android Deobfuscator.通用Android反混淆器。
mobile移动smali-cfgsSmali Control Flow Graph's.Smali控制流程图。
mobile移动smaliscaStatic Code Analysis for Smali files.Smali文件的静态代码分析。
mobile移动smartphone-pentest-frameworkRepository for the Smartphone Pentest Framework (SPF).智能手机Pentest框架(SPF)的存储库。
mobile移动stacoanCrossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.Crossplatform工具,可以帮助开发人员,bugbounty猎人和道德黑客在移动应用程序上执行静态代码分析。
networking联网afpfs-ngA client for the Apple Filing Protocol (AFP)Apple文件协议(AFP)的客户
networking联网aiengineA packet inspection engine with capabilities of learning without any human intervention.一种数据包检测引擎,具有无需人工干预即可学习的功能。
networking联网apacketSniffer syn and backscatter packets.Sniffer syn和反向散射包。
networking联网argusNetwork monitoring tool with flow control.具有流量控制的网络监控工具。
networking联网argus-clientsNetwork monitoring client for Argus.Argus的网络监控客户端。
networking联网arp-scanA tool that uses ARP to discover and fingerprint IP hosts on the local network使用ARP在本地网络上发现和指纹IP主机的工具
networking联网arpalertMonitor ARP changes in ethernet networks.监控以太网网络中的ARP更改。
networking联网arptoolsA simple tool about ARP broadcast, ARP attack, and data transmission.一个关于ARP广播,​​ARP攻击和数据传输的简单工具。
networking联网arpwnerGUI-based python tool for arp posioning and dns poisoning attacks.用于arp posioning和dns中毒攻击的基于GUI的python工具。
networking联网atftpClient/server implementation of the TFTP protocol that implements RFCs 1350, 2090, 2347, 2348, and 2349实现RFC 1350,2090,2347,2348和2349的TFTP协议的客户端/服务器实现
networking联网bind-toolsThe ISC DNS toolsISC DNS工具
networking联网broA powerful network analysis framework that is much different from the typical IDS you may know.一个强大的网络分析框架,与您可能知道的典型IDS有很大不同。
networking联网bro-auxHandy auxiliary programs related to the use of the Bro Network Security Monitor (https://www.bro.org/).与使用Bro Network Security Monitor(https://www.bro.org/)相关的便捷辅助程序。
networking联网buttinskyProvide an open source framework for automated botnet monitoring.为自动僵尸网络监控提供开源框架。
networking联网bypass-firewall-dns-historyFirewall bypass script based on DNS history records.防火墙绕过基于DNS历史记录的脚本。
networking联网cadaverCommand-line WebDAV client for Unix用于Unix的命令行WebDAV客户端
networking联网chameleonA tool for evading Proxy categorisation.用于规避代理分类的工具。
networking联网chaosreaderA freeware tool to trace tcp, udp etc. sessions and fetch application data from snoop or tcpdump logs.一个免费软件工具,用于跟踪tcp,udp等会话,并从snoop或tcpdump日志中获取应用程序数据。
networking联网chopshopProtocol Analysis/Decoder Framework.协议分析/解码器框架。
networking联网cidr2rangeScript for listing the IP addresses contained in a CIDR netblock.用于列出CIDR网络块中包含的IP地址的脚本。
networking联网creakPoison, reset, spoof, redirect MITM script.毒药,重置,欺骗,重定向MITM脚本。
networking联网cyberscanA Network Pentesting Tool网络测试工具
networking联网depdepA merciless sentinel which will seek sensitive files containing critical info leaking through your network.一个无情的哨兵,它将寻找包含通过您的网络泄漏的关键信息的敏感文件。
networking联网det(extensible) Data Exfiltration Toolkit.(可扩展)数据泄漏工具包。
networking联网dhcpoptinjDHCP option injector.DHCP选项注入器。
networking联网dinoumlA network simulation tool, based on UML (User Mode Linux) that can simulate big Linux networks on a single PC一种基于UML(用户模式Linux)的网络仿真工具,可以在一台PC上模拟大型Linux网络
networking联网dnsdiagDNS Diagnostics and Performance Measurement Tools.DNS诊断和性能测量工具。
networking联网dnsfilexferFile transfer via DNS.通过DNS传输文件。
networking联网dnstealDNS Exfiltration tool for stealthily sending files over DNS requests..DNS Exfiltration工具,用于通过DNS请求秘密发送文件。
networking联网dripcapCaffeinated Packet Analyzer.含咖啡因的包分析仪。
networking联网dtp-spoofPython script/security tool to test Dynamic Trunking Protocol configuration on a switch.用于在交换机上测试动态中继协议配置的Python脚本/安全工具。
networking联网dump1090A simple Mode S decoder for RTLSDR devices.用于RTLSDR设备的简单模式S解码器。
networking联网etherapeGraphical network monitor for various OSI layers and protocols用于各种OSI层和协议的图形网络监视器
networking联网exabgpThe BGP swiss army knife of networking.BGP瑞士军刀网络。
networking联网filibusterA Egress filter mapping application with additional functionality.具有附加功能的Egress过滤器映射应用程序。
networking联网firecatA penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.一种渗透测试工具,允许您从受损网络中打出反向TCP隧道。
networking联网flowinspectA network traffic inspection tool.网络流量检查工具。
networking联网fpingUtility to ping multiple hosts at once用于一次ping多个主机的实用程序
networking联网freeipmiSensor monitoring, system event monitoring, power control, and serial-over-LAN (SOL).传感器监控,系统事件监控,电源控制和LAN上串行(SOL)。
networking联网geoipNon-DNS IP-to-country resolver C library & utils非DNS IP到国家/地区的解析器C库和实用程序
networking联网gspoofA simple GTK/command line TCP/IP packet generator.一个简单的GTK /命令行TCP / IP数据包生成器。
networking联网gwcheckA simple program that checks if a host in an ethernet network is a gateway to Internet.一个简单的程序,用于检查以太网网络中的主机是否是Internet的网关。
networking联网hakaA collection of tool that allows capturing TCP/IP packets and filtering them based on Lua policy files.一组工具,允许捕获TCP / IP数据包并根据Lua策略文件对其进行过滤。
networking联网hharpThis tool can perform man-in-the-middle and switch flooding attacks. It has 4 major functions, 3 of which attempt to man-in-the-middle one or more computers on a network with a passive method or flood type method.该工具可以执行中间人和交换洪水攻击。它有4个主要功能,其中3个尝试使用被动方法或泛洪类型方法在网络中的一个或多个计算机。
networking联网hpingA command-line oriented TCP/IP packet assembler/analyzer.面向命令行的TCP / IP数据包汇编器/分析器。
networking联网http-tracerouteThis is a python script that uses the Max-Forwards header in HTTP and SIP to perform a traceroute-like scanning functionality.这是一个python脚本,它使用HTTP和SIP中的Max-Forwards标头来执行类似traceroute的扫描功能。
networking联网httpingA ping-like tool for http-requests用于http请求的类似ping的工具
networking联网hydeJust another tool in C to do DDoS (with spoofing).只是C中的另一个工具来做DDoS(带欺骗)。
networking联网hyenaeflexible platform independent packet generator灵活的平台独立包发生器
networking联网hyperfoxA security tool for proxying and recording HTTP and HTTPs traffic.用于代理和记录HTTP和HTTP流量的安全工具。
networking联网interlaceEasily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.通过CIDR和glob支持,轻松将单线程命令行应用程序转换为快速的多线程应用程序。
networking联网ipauditMonitors network activity on a network.监控网络上的网络活动。
networking联网ipdecapCan decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, and can also remove IEEE 802.1Q (virtual lan) header.可以解封封在GRE,IPIP,6in4,ESP(ipsec)协议中的流量,还可以删除IEEE 802.1Q(虚拟局域网)报头。
networking联网ipmitoolCommand-line interface to IPMI-enabled devices启用IPMI的设备的命令行界面
networking联网iputilsNetwork monitoring tools, including ping网络监控工具,包括ping
networking联网ipv4bypassUsing IPv6 to Bypass Security.使用IPv6绕过安全性。
networking联网jnetmapA network monitor of sorts各种网络监视器
networking联网kickthemoutKick devices off your network by performing an ARP Spoof attack.通过执行ARP欺骗攻击来破坏网络设备。
networking联网latdA LAT terminal daemon for Linux and BSD.适用于Linux和BSD的LAT终端守护程序。
networking联网loicAn open source network stress tool for Windows.适用于Windows的开源网络压力工具。
networking联网macchangerA small utility to change your NIC's MAC address一个用于更改NIC的MAC地址的小工具
networking联网maclookupLookup MAC addresses in the IEEE MA-L/OUI public listing.查找IEEE MA-L / OUI公开列表中的MAC地址。
networking联网makethA packet generator that supports forging ARP, IP, TCP, UDP, ICMP and the ethernet header as well.一种数据包生成器,支持伪造ARP,IP,TCP,UDP,ICMP和以太网头。
networking联网malcomAnalyze a system's network communication using graphical representations of network traffic.使用网络流量的图形表示来分析系统的网络通信。
networking联网massdnsA high-performance DNS stub resolver in C.C中的高性能DNS存根解析器
networking联网middlerA Man in the Middle tool to demonstrate protocol middling attacks.一个Man in the Middle工具,用于演示协议中等攻击。
networking联网molochAn open source large scale IPv4 full PCAP capturing, indexing and database system.一个开源的大型IPv4完整PCAP捕获,索引和数据库系统。
networking联网mptcpA tool for manipulation of raw packets that allows a large number of options.用于处理原始数据包的工具,允许大量选项。
networking联网mptcp-abuseA collection of tools and resources to explore MPTCP on your network. Initially released at Black Hat USA 2014.一系列工具和资源,用于探索网络上的MPTCP。最初于2014年Black Hat USA发布。
networking联网mtrCombines the functionality of traceroute and ping into one tool (CLI version)将traceroute和ping的功能合并到一个工具中(CLI版本)
networking联网mylgNetwork Diagnostic Tool.网络诊断工具。
networking联网nackerA tool to circumvent 802.1x Network Access Control on a wired LAN.一种绕过有线LAN上的802.1x网络访问控制的工具。
networking联网nbtoolSome tools for NetBIOS and DNS investigation, attacks, and communication.一些用于NetBIOS和DNS调查,攻击和通信的工具。
networking联网ncpfsAllows you to mount volumes of NetWare servers under Linux.允许您在Linux下安装大量NetWare服务器。
networking联网nemesisA command-line network packet crafting and injection utility.命令行网络数据包制作和注入实用程序。
networking联网netactviewA graphical network connections viewer similar in functionality to netstat.一种图形网络连接查看器,其功能与netstat类似。
networking联网netconA network connection establishment and management script.网络连接建立和管理脚本。
networking联网netmapCan be used to make a graphical representation of the surounding network.可用于制作外围网络的图形表示。
networking联网netreconnA collection of network scan/recon tools that are relatively small compared to their larger cousins.网络扫描/侦察工具的集合,与其较大的同类相比相对较小。
networking联网netsedSmall and handful utility design to alter the contents of packets forwarded thru network in real time.小而实用的实用程序设计,可以实时改变通过网络转发的数据包的内容。
networking联网networkmapPost-exploitation network mapper.后期开发网络映射器。
networking联网nextnetPivot point discovery tool.枢轴点发现工具。
networking联网nfdumpA set of tools to collect and process netflow data.一组用于收集和处理netflow数据的工具。
networking联网ngrepA grep-like utility that allows you to search for network packets on an interface.类似grep的实用程序,允许您在接口上搜索网络数据包。
networking联网nieldA tool to receive notifications from kernel through netlink socket, and generate logs related to interfaces, neighbor cache(ARP,NDP), IP address(IPv4,IPv6), routing, FIB rules, traffic control.一种工具,通过netlink套接字从内核接收通知,并生成与接口,邻居缓存(ARP,NDP),IP地址(IPv4,IPv6),路由,FIB规则,流量控制相关的日志。
networking联网nipperNetwork Infrastructure Parser网络基础设施解析器
networking联网nsdtoolA netgear switch discovery tool. It contains some extra features like bruteoforce and setting a new password.netgear交换机发现工具。它包含一些额外的功能,如bruteoforce和设置新密码。
networking联网nsoqA Network Security Tool for packet manipulation that allows a large number of options.用于数据包操作的网络安全工具,允许大量选项。
networking联网packet-o-maticA real time packet processor. Reads the packet from an input module, match the packet using rules and connection tracking information and then send it to a target module.实时数据包处理器。从输入模块读取数据包,使用规则和连接跟踪信息匹配数据包,然后将其发送到目标模块。
networking联网packethA Linux GUI packet generator tool for ethernet.用于以太网的Linux GUI数据包生成器工具。
networking联网packetqA tool that provides a basic SQL-frontend to PCAP-files.一种为PCAP文件提供基本SQL前端的工具。
networking联网packetsenderAn open source utility to allow sending and receiving TCP and UDP packets.允许发送和接收TCP和UDP数据包的开源实用程序。
networking联网packitA network auditing tool. Its value is derived from its ability to customize, inject, monitor, and manipulate IP traffic.网络审计工具。它的价值来自于它定制,注入,监控和操纵IP流量的能力。
networking联网pcapfexPacket CAPture Forensic Evidence eXtractor.Packet CAPture法证证据eXtractor。
networking联网pcapfixTries to repair your broken pcap and pcapng files.尝试修复损坏的pcap和pcapng文件。
networking联网pkt2flowA simple utility to classify packets into flows.一种将数据包分类为流的简单实用程序。
networking联网pmacctSmall set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP IGP Streaming Telemetry].小型多用途被动网络监控工具[NetFlow IPFIX sFlow libpcap BGP BMP IGP Streaming Telemetry]。
networking联网prometheus-firewallA Firewall analyzer written in ruby用ruby编写的防火墙分析器
networking联网pwnatA tool that allows any number of clients behind NATs to communicate with a server behind a separate NAT with *no* port forwarding and *no* DMZ setup on any routers in order to directly communicate with each other.允许NAT后面的任意数量的客户端与单独的NAT后面的服务器通信的工具,在任何路由器上都有* no *端口转发和* no * DMZ设置,以便直接相互通信。
networking联网pyersiniaNetwork attack tool like yersinia but written in Python.网络攻击工具,如yersinia,但用Python编写。
networking联网pyexfilA couple of beta stage tools for data exfiltration.一些用于数据泄露的beta阶段工具。
networking联网pyminifakednsMinimal DNS server written in Python; it always replies with a 127.0.0.1 A-record.用Python编写的最小DNS服务器; 它总是回复127.0.0.1 A记录。
networking联网python-python-cymruwhoisPython client for the whois.cymru.com servicewhois.cymru.com服务的Python客户端
networking联网rinetdinternet redirection server互联网重定向服务器
networking联网rtpbreakDetects, reconstructs and analyzes any RTP session检测,重建和分析任何RTP会话
networking联网samplicatorSend copies of (UDP) datagrams to multiple receivers, with optional sampling and spoofing.将(UDP)数据报的副本发送到多个接收器,可选择采样和欺骗。
networking联网scapyPowerful interactive packet manipulation program written in Python (tools)用Python编写的强大的交互式数据包操作程序(工具)
networking联网sdn-toolkitDiscover, Identify, and Manipulate SDN-Based Networks发现,识别和操纵基于SDN的网络
networking联网sessionlistSniffer that intents to sniff HTTP packets and attempts to reconstruct interesting authentication data from websites that do not employ proper secure cookie auth.试图嗅探HTTP数据包并试图从未使用适当的安全cookie身份验证的网站重建有趣的身份验证数据的嗅探器。
networking联网sethPerform a MitM attack and extract clear text credentials from RDP connections.执行MitM攻击并从RDP连接中提取明文凭据。
networking联网silkA collection of traffic analysis tools developed by the CERT NetSA to facilitate security analysis of large networks.由CERT NetSA开发的一组流量分析工具,用于促进大型网络的安全分析。
networking联网snifferPacket Trace Parser for TCP, SMTP Emails, and HTTP Cookies.用于TCP,SMTP电子邮件和HTTP Cookie的数据包跟踪分析器。
networking联网snifflesA Packet Capture Generator for IDS and Regular Expression Evaluation.用于IDS和正则表达式评估的数据包捕获生成器。
networking联网snmpattackSNMP scanner and attacking tool.SNMP扫描程序和攻击工具。
networking联网snmpcheckA free open source utility to get information via SNMP protocols.一个免费的开源实用程序,通过SNMP协议获取信息。
networking联网socatMultipurpose relay多用途继电器
networking联网sockstatA tool to let you view information about open connections. It is similar to the tool of the same name that is included in FreeBSD, trying to faithfully reproduce as much functionality as is possible.一种工具,可让您查看有关打开的连接的信息。它类似于FreeBSD中包含的同名工具,试图忠实地再现尽可能多的功能。
networking联网spipedA utility for creating symmetrically encrypted and authenticated pipes between socket addresses.用于在套接字地址之间创建对称加密和验证管道的实用程序。
networking联网spsA Linux packet crafting tool. Supports IPv4, IPv6 including extension headers, and tunneling IPv6 over IPv4.Linux数据包制作工具。支持IPv4,IPv6,包括扩展头,以及通过IPv4隧道传输IPv6。
networking联网sslhSSL/SSH/OpenVPN/XMPP/tinc port multiplexerSSL / SSH / OpenVPN / XMPP / tinc端口多路复用器
networking联网stunnelA program that allows you to encrypt arbitrary TCP connections inside SSL一个程序,允许您加密SSL内的任意TCP连接
networking联网swaksSwiss Army Knife SMTP; Command line SMTP testing, including TLS and AUTH瑞士军刀SMTP; 命令行SMTP测试,包括TLS和AUTH
networking联网tcpcopyA TCP stream replay tool to support real testing of Internet server applications.TCP流重放工具,支持Internet服务器应用程序的实际测试。
networking联网tcpdstatGet protocol statistics from tcpdump pcap files.从tcpdump pcap文件中获取协议统计信息。
networking联网tcpdumpPowerful command-line packet analyzer强大的命令行数据包分析器
networking联网tcpextractExtracts files from captured TCP sessions. Support live streams and pcap files.从捕获的TCP会话中提取文件。支持实时流和pcap文件。
networking联网tcpflowCaptures data transmitted as part of TCP connections then stores the data conveniently捕获作为TCP连接的一部分传输的数据,然后方便地存储数据
networking联网tcpreplayGives the ability to replay previously captured traffic in a libpcap format能够以libpcap格式重放以前捕获的流量
networking联网tcptraceA TCP dump file analysis toolTCP转储文件分析工具
networking联网tcptracerouteA traceroute implementation using TCP packets.使用TCP数据包的traceroute实现。
networking联网tcpwatchA utility written in Python that lets you monitor forwarded TCP connections or HTTP proxy connections.用Python编写的实用程序,可用于监视转发的TCP连接或HTTP代理连接。
networking联网tgcdTCP/IP Gender Changer Daemon utility.TCP / IP性别转换器守护程序实用程序。
networking联网thc-ipv6Complete tool set to attack the inherent protocol weaknesses of IPv6 and ICMP6完整的工具集可以攻击IPv6和ICMP6的固有协议弱点
networking联网tincVPN (Virtual Private Network) daemonVPN(虚拟专用网络)守护程序
networking联网tunnaa set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.一组工具,它们将通过HTTP包装和隧道任何TCP通信。它可用于在完全防火墙环境中绕过网络限制。
networking联网udpastcpThis program hides UDP traffic as TCP traffic in order to bypass certain firewalls.此程序将UDP流量隐藏为TCP流量,以绕过某些防火墙。
networking联网udptunnelTunnels TCP over UDP packets.隧道TCP over UDP数据包。
networking联网umitA powerful nmap frontend.一个强大的nmap前端。
networking联网uw-offishClear-text protocol simulator.明文协议模拟器。
networking联网websockifyWebSocket to TCP proxy/bridge.WebSocket到TCP代理/桥接。
networking联网xerosploitEfficient and advanced man in the middle framework.中间框架中的高效和先进的人。
networking联网yafYet Another Flowmeter.还有另一台流量计。
networking联网yersiniaA network tool designed to take advantage of some weakness in different network protocols.一种网络工具,旨在利用不同网络协议中的一些弱点。
networking联网zackattackA new tool set to do NTLM Authentication relaying unlike any other tool currently out there.一个新的工具集,用于执行NTLM身份验证中继,与当前其他工具不同。
networking联网zsshSSH and Telnet client with ZMODEM file transfer capability具有ZMODEM文件传输功能的SSH和Telnet客户端
nfcNFCnfcutilsProvides a simple 'lsnfc' command that list tags which are in your NFC device field提供简单的'lsnfc'命令,列出NFC设备字段中的标签
packer打包机sherlockedUniversal script packer-- transforms any type of script into a protected ELF executable, encrypted with anti-debugging.通用脚本打包器 - 将任何类型的脚本转换为受保护的ELF可执行文件,并使用反调试进行加密。
proxy代理3proxyTiny free proxy server.微小的免费代理服务器。
proxy代理bdfproxyPatch Binaries via MITM: BackdoorFactory + mitmProxy通过MITM修补二进制文件:BackdoorFactory + mitmProxy
proxy代理binproxyA proxy for arbitrary TCP connections.任意TCP连接的代理。
proxy代理cntlmAn NTLM, NTLM2SR, and NTLMv2 authenticating HTTP proxy.验证HTTP代理的NTLM,NTLM2SR和NTLMv2。
proxy代理dns-reverse-proxyA reverse DNS proxy written in Go.用Go编写的反向DNS代理。
proxy代理dnschefA highly configurable DNS proxy for pentesters.用于测试者的高度可配置的DNS代理。
proxy代理elite-proxy-finderFinds public elite anonymity proxies and concurrently tests them.找到公共精英匿名代理并同时测试它们。
proxy代理fakednsA regular-expression based python MITM DNS server with correct DNS request passthrough and "Not Found" responses.基于正则表达式的python MITM DNS服务器,具有正确的DNS请求直通和“未找到”响应。
proxy代理mitm-relayHackish way to intercept and modify non-HTTP protocols through Burp & others.Hackish通过Burp和其他人拦截和修改非HTTP协议的方式。
proxy代理mitmproxySSL-capable man-in-the-middle HTTP proxy具有SSL功能的中间人HTTP代理
proxy代理obfs4proxyA pluggable transport proxy written in Go.用Go编写的可插拔传输代理。
proxy代理obfsproxyA pluggable transport proxy written in Python用Python编写的可插拔传输代理
proxy代理pr0ckspython script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target.python脚本设置透明代理,使用iptables -j REDIRECT目标通过SOCKS / SOCKS5或HTTP(CONNECT)代理转发所有TCP和DNS流量。
proxy代理proxychains-ngA hook preloader that allows to redirect TCP traffic of existing dynamically linked programs through one or more SOCKS or HTTP proxies钩子预加载器,允许通过一个或多个SOCKS或HTTP代理重定向现有动态链接程序的TCP流量
proxy代理proxypSmall multithreaded Perl script written to enumerate latency, port numbers, server names, & geolocations of proxy IP addresses.编写的小型多线程Perl脚本,用于枚举代理IP地址的延迟,端口号,服务器名称和地理位置。
proxy代理redsocksTransparent redirector of any TCP connection to proxy.代理的任何TCP连接的透明重定向器。
proxy代理rpivotSocks4 reverse proxy for penetration testing.Socks4反向代理进行渗透测试。
proxy代理sergio-proxyA multi-threaded transparent HTTP proxy for manipulating web traffic用于处理Web流量的多线程透明HTTP代理
proxy代理soapuiThe Swiss-Army Knife for SOAP Testing.用于SOAP测试的瑞士军刀。
proxy代理sshuttleTransparent proxy server that forwards all TCP packets over ssh透明代理服务器,通过ssh转发所有TCP数据包
proxy代理ssrf-proxyFacilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.通过易受服务器端请求伪造攻击的服务器促进HTTP通信的隧道传输。
proxy代理starttls-mitmA mitm proxy that will transparently proxy and dump both plaintext and TLS traffic.一个mitm代理,它将透明地代理和转储明文和TLS流量。
proxy代理striptlsProxy PoC implementation of STARTTLS stripping attacks.代理PoC实施STARTTLS剥离攻击。
proxy代理tftp-proxyThis tool accepts connection on tftp and reloads requested content from an upstream tftp server. Meanwhile modifications to the content can be done by pluggable modules. So this one's nice if your mitm with some embedded devices.此工具接受tftp上的连接,并从上游tftp服务器重新加载请求的内容。同时,可以通过可插拔模块对内容进行修改。所以,如果你的装备有一些嵌入式设备,这个很好。
proxy代理tinyproxyA light-weight HTTP proxy daemon for POSIX operating systems.用于POSIX操作系统的轻量级HTTP代理守护程序。
proxy代理torAnonymizing overlay network.匿名覆盖网络。
proxy代理torsocksWrapper to safely torify applications包装,以安全地扭曲应用程序
proxy代理webfixyOn-the-fly decryption proxy for MikroTik RouterOS WebFig sessions.用于MikroTik RouterOS WebFig会话的动态解密代理。
radio无线电gpredictA real-time satellite tracking and orbit prediction application.实时卫星跟踪和轨道预测应用程序。
radio无线电gps-sdr-simSoftware-Defined GPS Signal Simulator.软件定义的GPS信号模拟器。
radio无线电gr-air-modesGnuradio tools for receiving Mode S transponder signals, including ADS-B.用于接收模式S转发器信号的Gnuradio工具,包括ADS-B。
radio无线电gr-gsmGnuradio blocks and tools for receiving GSM transmissionsGnuradio阻止和接收GSM传输的工具
radio无线电gr-paintAn OFDM Spectrum Painter for GNU Radio.用于GNU无线电的OFDM频谱画家。
radio无线电hackrfDriver for HackRF, allowing general purpose software defined radio (SDR).HackRF的驱动程序,允许通用软件定义无线电(SDR)。
radio无线电libosmocoreCollection of common code used in various sub-projects inside the Osmocom family of projects.Osmocom系列项目中各种子项目中使用的公共代码的集合。
radio无线电multimon-ngAn sdr decoder, supports pocsag, ufsk, clipfsk, afsk, hapn, fsk, dtmf, zvei.解码器,pocsag支持,ufsk,clipfsk,afsk,hapn,fsk,dtmf,zvei。
radio无线电proxmarkA powerful general purpose RFID tool, the size of a deck of cards, designed to snoop, listen and emulate everything from Low Frequency (125kHz) to High Frequency (13.56MHz) tags.功能强大的通用RFID工具,一副卡片的大小,旨在窥探,收听和模拟从低频(125kHz)到高频(13.56MHz)标签的所有内容。
radio无线电rtlamrAn rtl-sdr receiver for smart meters operating in the 900MHz ISM band.用于智能电表的rtl-sdr接收器,工作在900MHz ISM频段。
radio无线电simtrace2Host utilities to communicate with SIMtrace2 USB Devices.主机实用程序与SIMtrace2 USB设备通信。
radio无线电urhUniversal Radio Hacker: investigate wireless protocols like a bossUniversal Radio Hacker:像老板一样研究无线协议
radio无线电yate-btsAn open source GSM Base Station software.一个开源的GSM基站软件。
recon侦察ad-ldap-enumAn LDAP based Active Directory user and group enumeration tool.基于LDAP的Active Directory用户和组枚举工具。
recon侦察altdnsGenerates permutations, alterations and mutations of subdomains and then resolves them.生成子域的排列,更改和突变,然后解析它们。
recon侦察api-dnsdumpsterUnofficial Python API for http://dnsdumpster.com/.适用于http://dnsdumpster.com/的非官方Python API。
recon侦察aquatoneA Tool for Domain Flyovers.域名天桥的工具。
recon侦察autosintTool to automate common osint tasks.用于自动执行常见osint任务的工具。
recon侦察aws-inventoryDiscover resources created in an AWS account.发现在AWS账户中创建的资源。
recon侦察aztarnaA footprinting tool for ROS and SROS systems.ROS和SROS系统的足迹工具。
recon侦察badkarmaAdvanced network reconnaissance toolkit.先进的网络侦察工具包。
recon侦察basedomainnameTool that can extract TLD (Top Level Domain), domain extensions (Second Level Domain + TLD), domain name, and hostname from fully qualified domain names.可以从完全限定的域名中提取TLD(顶级域),域扩展(二级域+ TLD),域名和主机名的工具。
recon侦察bfacAn automated tool that checks for backup artifacts that may disclose the web-application's source code.一种自动化工具,用于检查可能泄露Web应用程序源代码的备份工件。
recon侦察billcipherInformation Gathering tool for a Website or IP address.用于网站或IP地址的信息收集工具。
recon侦察bing-ip2hostsEnumerates all hostnames which Bing has indexed for a specific IP address.枚举Bing已为特定IP地址编制索引的所有主机名。
recon侦察bloodhoundSix Degrees of Domain Admin六度域名管理员
recon侦察catnthecanaryAn application to query the canary.pw data set for leaked data.用于查询canary.pw数据集以泄漏数据的应用程序。
recon侦察certgraphCrawl the graph of certificate Alternate Names.抓取证书替代名称的图表。
recon侦察cloudfailUtilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network.利用配置错误的DNS和旧数据库记录来查找CloudFlare网络背后的隐藏IP。
recon侦察cr3dov3rSearch for public leaks for email addresses + check creds against 16 websites.搜索电子邮件地址的公共泄密+检查16个网站的信誉。
recon侦察cutycaptA Qt and WebKit based command-line utility that captures WebKit's rendering of a web page.基于Qt和WebKit的命令行实用程序,用于捕获WebKit对网页的呈现。
recon侦察datasploitPerforms automated OSINT and more.执行自动OSINT等。
recon侦察dga-detectionDGA Domain Detection using Bigram Frequency Analysis.使用Bigram频率分析的DGA域检测。
recon侦察dns-parallel-proberPoC for an adaptive parallelised DNS prober.适用于自适应并行DNS探测器的PoC。
recon侦察dnsbruteMulti-theaded DNS bruteforcing, average speed 80 lookups/second with 40 threads.多线程DNS强制执行,平均速度80次查找/秒,40个线程。
recon侦察dnsenumScript that enumerates DNS information from a domain, attempts zone transfers, performs a brute force dictionary style attack, and then performs reverse look-ups on the results.从域中枚举DNS信息,尝试区域传输,执行暴力字典样式攻击,然后对结果执行反向查找的脚本。
recon侦察dnsgrepA utility for quickly searching presorted DNS names.用于快速搜索预分类DNS名称的实用程序。
recon侦察dnsreconPython script for enumeration of hosts, subdomains and emails from a given domain using google.Python脚本,用于使用谷歌枚举来自给定域的主机,子域和电子邮件。
recon侦察dnssearchA subdomain enumeration tool.子域枚举工具。
recon侦察dnsspiderA very fast multithreaded bruteforcer of subdomains that leverages a wordlist and/or character permutation.一个非常快速的多线程子域的bruteforcer,利用词表和/或字符排列。
recon侦察dnstracerDetermines where a given DNS server gets its information from, and follows the chain of DNS servers确定给定DNS服务器从哪里获取其信息,并遵循DNS服务器链
recon侦察dnswalkA DNS debugger.DNS调试器。
recon侦察domain-analyzerFinds all the security information for a given domain name.查找给定域名的所有安全信息。
recon侦察domain-statsA web API to deliver domain information from whois and alexa.用于从whois和alexa提供域信息的Web API。
recon侦察dradisAn open source framework to enable effective information sharing.一个开源框架,可实现有效的信息共享。
recon侦察dradis-ceAn open source framework to enable effective information sharing.一个开源框架,可实现有效的信息共享。
recon侦察enum4linuxA tool for enumerating information from Windows and Samba systems.用于枚举Windows和Samba系统信息的工具。
recon侦察enumeridEnumerate RIDs using pure Python.使用纯Python枚举RID。
recon侦察exitmapA fast and modular scanner for Tor exit relays.用于Tor出口继电器的快速模块化扫描仪。
recon侦察facebotA facebook profile and reconnaissance system.Facebook个人资料和侦察系统。
recon侦察fbidShow info about the author by facebook photo url.通过facebook photo url显示作者信息。
recon侦察flashlightAutomated Information Gathering Tool for Penetration Testers.渗透测试仪的自动信息收集工具。
recon侦察foragerMultithreaded threat Intelligence gathering utilizing.多线程威胁情报收集利用。
recon侦察gasmaskAll in one Information gathering tool - OSINT.一体化信息收集工具 - OSINT。
recon侦察gatecrasherNetwork auditing and analysis tool developed in Python.用Python开发的网络审计和分析工具。
recon侦察geoedgeThis little tools is designed to get geolocalization information of a host, it get the information from two sources (maxmind and geoiptool).这个小工具旨在获取主机的地理定位信息,它从两个来源(maxmind和geoiptool)获取信息。
recon侦察gitemA Github organization reconnaissance tool.Github组织侦察工具。
recon侦察githackA `.git` folder disclosure exploit.一个`.git`文件夹披露漏洞利用。
recon侦察gitleaksAudit Git repos for secrets and keys.审核Git回收秘密和密钥。
recon侦察gitmailsAn information gathering tool to collect git commit emails in version control host services.一种信息收集工具,用于在版本控制主机服务中收集git提交电子邮件。
recon侦察gitminerTool for advanced mining for content on Github.Github上内容的高级挖掘工具。
recon侦察goddiDumps Active Directory domain information.转储Active Directory域信息。
recon侦察goodorkA python script designed to allow you to leverage the power of google dorking straight from the comfort of your command line.一个python脚本,旨在让您从舒适的命令行直接利用谷歌dorking的力量。
recon侦察goofileCommand line filetype search命令行文件类型搜索
recon侦察goog-mailEnumerate domain emails from google.枚举来自谷歌的域电子邮件。
recon侦察googlesubA python script to find domains by using google dorks.一个python脚本,使用谷歌dorks查找域名。
recon侦察goohakAutomatically Launch Google Hacking Queries Against A Target Domain.针对目标域自动启动Google Hacking查询。
recon侦察gosintOSINT framework in Go.Go中的OSINT框架。
recon侦察grabingCounts all the hostnames for an IP adress计算IP地址的所有主机名
recon侦察gwtenumEnumeration of GWT-RCP method calls.GWT-RCP方法调用的枚举。
recon侦察h8mailEmail OSINT and password breach hunting.通过电子邮件发送OSINT和密码破解程序。
recon侦察halcyonA repository crawler that runs checksums for static files found within a given git repository.一个存储库爬网程序,它运行在给定git存储库中找到的静态文件的校验和。
recon侦察hasereDiscover the vhosts using google and bing.使用谷歌和bing发现虚拟主机。
recon侦察hatcloudBypass CloudFlare with Ruby.用Ruby绕过CloudFlare。
recon侦察hoperTrace URL's jumps across the rel links to obtain the last URL.跟踪URL跳过rel链接以获取最后一个URL。
recon侦察hosthunterA recon tool for discovering hostnames using OSINT techniques.用于使用OSINT技术发现主机名的侦察工具。
recon侦察howmanypeoplearearoundCount the number of people around you by monitoring wifi signals.通过监控wifi信号来计算您周围的人数。
recon侦察id-entifySearch for information related to a domain: Emails - IP addresses - Domains - Information on WEB technology - Type of Firewall - NS and MX records.搜索与域相关的信息:电子邮件 - IP地址 - 域 - 有关WEB技术的信息 - 防火墙类型 - NS和MX记录。
recon侦察idswakeupA collection of tools that allows to test network intrusion detection systems.一组允许测试网络入侵检测系统的工具。
recon侦察infogaTool for gathering e-mail accounts information from different public sources (search engines, pgp key servers).用于从不同公共来源(搜索引擎,pgp密钥服务器)收集电子邮件帐户信息的工具。
recon侦察inquisitorOSINT Gathering Tool for Companies and Organizations.OSINT为公司和组织收集工具。
recon侦察intraceTraceroute-like application piggybacking on existing TCP connections类似Traceroute的应用程序搭载现有的TCP连接
recon侦察ip-tracerTrack and retrieve any ip address information.跟踪和检索任何IP地址信息。
recon侦察ip2clueA small memory/CPU footprint daemon to lookup country (and other info) based on IP (v4 and v6).一个小内存/ CPU占用守护程序,用于根据IP(v4和v6)查找国家(和其他信息)。
recon侦察iptodomainThis tool extract domains from IP address based in the information saved in virustotal.此工具根据保存在virustotal中的信息从IP地址中提取域。
recon侦察ircsnapshotTool to gather information from IRC servers.从IRC服务器收集信息的工具。
recon侦察isr-formSimple html parsing tool that extracts all form related information and generates reports of the data. Allows for quick analyzing of data.简单的html解析工具,可提取所有与表单相关的信息并生成数据报告。允许快速分析数据。
recon侦察ivreNetwork recon framework网络侦察框架
recon侦察ivre-docsNetwork recon framework (documentation)网络侦察框架(文档)
recon侦察ivre-webNetwork recon framework (web application)网络侦察框架(网络应用程序)
recon侦察kacakTools for penetration testers that can enumerate which users logged on windows system.用于渗透测试人员的工具,可以枚举哪些用户登录Windows系统。
recon侦察lanmap2Passive network mapping tool.被动网络映射工具。
recon侦察lbdLoad Balancing detector负载平衡检测器
recon侦察ldapenumEnumerate domain controllers using LDAP.使用LDAP枚举域控制器。
recon侦察ldeepIn-depth ldap enumeration utility.深入的ldap枚举实用程序。
recon侦察lftA layer four traceroute implementing numerous other features.第四层traceroute实现了许多其他功能。
recon侦察lhfA modular recon tool for pentesting.用于测试的模块化侦察工具。
recon侦察linux-exploit-suggesterA Perl script that tries to suggest exploits based OS version number.一个Perl脚本,试图根据操作系统版本号建议漏洞。
recon侦察linux-exploit-suggester.shLinux privilege escalation auditing tool.Linux权限升级审核工具。
recon侦察littlebrotherOSINT tool to get informations on French, Belgian and Swizerland people.OSINT工具,用于获取法国,比利时和瑞士人的信息。
recon侦察lootSensitive information extraction tool.敏感信息提取工具。
recon侦察machinaeA tool for collecting intelligence from public sites/feeds about various security-related pieces of data.用于从公共站点/提要中收集有关各种与安全相关的数据的情报的工具。
recon侦察mail-crawlTool to harvest emails from website.从网站收集电子邮件的工具。
recon侦察massbleedSSL Vulnerability Scanner.SSL漏洞扫描程序。
recon侦察mdns-reconAn mDNS recon tool written in Python.用Python编写的mDNS recon工具。
recon侦察metagoofilAn information gathering tool designed for extracting metadata of public documents.一种信息收集工具,用于提取公共文档的元数据。
recon侦察missidentifyA program to find Win32 applications.一个查找Win32应用程序的程序。
recon侦察monocleA local network host discovery tool. In passive mode, it will listen for ARP request and reply packets. In active mode, it will send ARP requests to the specific IP range. The results are a list of IP and MAC addresses present on the local network.本地网络主机发现工具。在被动模式下,它将侦听ARP请求并回复数据包。在活动模式下,它会将ARP请求发送到特定的IP范围。结果是本地网络上存在的IP和MAC地址列表。
recon侦察nasnumScript to enumerate network attached storages.用于枚举网络附加存储的脚本。
recon侦察necromantPython Script that search unused Virtual Hosts in Web Servers.搜索Web服务器中未使用的虚拟主机的Python脚本。
recon侦察neglectedFacebook CDN Photo Resolver.Facebook CDN Photo Resolver。
recon侦察netdiscoverAn active/passive address reconnaissance tool, mainly developed for those wireless networks without dhcp server, when you are wardriving. It can be also used on hub/switched networks.主动/被动地址侦察工具,主要是为那些没有dhcp服务器的无线网络开发的。它也可以用在集线器/交换网络上。
recon侦察netkit-bsd-fingerBSD-finger ported to Linux.BSD-finger移植到Linux。
recon侦察netmaskHelps determine network masks帮助确定网络掩码
recon侦察nohidyThe system admins best friend, multi platform auditing tool.系统管理最好的朋友,多平台审计工具。
recon侦察nsec3walkerEnumerates domain names using DNSSEC使用DNSSEC枚举域名
recon侦察ntp-ip-enumScript to pull addresses from a NTP server using the monlist command. Can also output Maltego resultset.使用monlist命令从NTP服务器提取地址的脚本。也可以输出Maltego结果集。
recon侦察nullinuxTool that can be used to enumerate OS information, domain information, shares, directories, and users through SMB null sessions.可用于通过SMB空会话枚举OS信息,域信息,共享,目录和用户的工具。
recon侦察omnibusOSINT tool for intelligence collection, research and artifact management.OSINT工具,用于情报收集,研究和工件管理。
recon侦察onioffAn onion url inspector for inspecting deep web links.用于检查深层网络链接的洋葱网页检查员。
recon侦察osint-spyPerforms OSINT scan on email/domain/ip_address/organization.在email / domain / ip_address / organization上执行OSINT扫描。
recon侦察osinteratorOpen Source Toolkit for Open Source Intelligence Gathering.用于开源智能收集的开源工具包。
recon侦察osrframeworkA project focused on providing API and tools to perform more accurate online researches.一个项目专注于提供API和工具,以执行更准确的在线研究。
recon侦察parseroA robots.txt audit tool.robots.txt审核工具。
recon侦察pmapperA tool for quickly evaluating IAM permissions in AWS.用于在AWS中快速评估IAM权限的工具。
recon侦察punterHunt domain names using DNSDumpster, WHOIS, Reverse WHOIS, Shodan, Crimeflare.使用DNSDumpster,WHOIS,反向WHOIS,Shodan,Crimeflare寻找域名。
recon侦察pwnedA command-line tool for querying the 'Have I been pwned?' service.一个命令行工具,用于查询“我已经被淹没了吗?” 服务。
recon侦察pwnedornotTool to find passwords for compromised email addresses.用于查找受感染电子邮件地址的密码的工具。
recon侦察pymetaAuto Scanning to SSL Vulnerability.自动扫描到SSL漏洞。
recon侦察python-ivreNetwork recon framework (library)网络侦察框架(图书馆)
recon侦察python-shodanPython library and command-line utility for Shodan (https://developer.shodan.io).Shodan的Python库和命令行实用程序(https://developer.shodan.io)。
recon侦察python2-ivreNetwork recon framework (library)网络侦察框架(图书馆)
recon侦察python2-shodanPython library and command-line utility for Shodan (https://developer.shodan.io).Shodan的Python库和命令行实用程序(https://developer.shodan.io)。
recon侦察quickreconA python script for simple information gathering. It attempts to find subdomain names, perform zone transfers and gathers emails from Google and Bing.用于简单信息收集的python脚本。它会尝试查找子域名,执行区域传输以及收集来自Google和Bing的电子邮件。
recon侦察raccoonA high performance offensive security tool for reconnaissance and vulnerability scanning.一种用于侦察和漏洞扫描的高性能攻击性安全工具。
recon侦察recon-ngA full-featured Web Reconnaissance framework written in Python.用Python编写的全功能Web侦察框架。
recon侦察reconnoitreA security tool for multithreaded information gathering and service enumeration.用于多线程信息收集和服务枚举的安全工具。
recon侦察reconscanNetwork reconnaissance and vulnerability assessment tools.网络侦察和漏洞评估工具。
recon侦察recsechTool for doing Footprinting and Reconnaissance on the target web.在目标网站上进行足迹和侦察的工具。
recon侦察red-hawkAll in one tool for Information Gathering, Vulnerability Scanning and Crawling.所有功能于一身的信息收集,漏洞扫描和抓取工具。
recon侦察reverseipRuby based reverse IP-lookup tool.基于Ruby的反向IP查找工具。
recon侦察revipdA simple reverse IP domain scanner.一个简单的反向IP域扫描器。
recon侦察ripdcA script which maps domains related to an given ip address or domainname.映射与给定IP地址或域名相关的域的脚本。
recon侦察sctpscanA network scanner for discovery and security.用于发现和安全的网络扫描程序。
recon侦察server-status-pwnA script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.通过利用可公开访问的Apache服务器状态实例来监视和提取连接到服务的请求URL和客户端的脚本。
recon侦察shardA command line tool to detect shared passwords.用于检测共享密码的命令行工具。
recon侦察shodanPython library and command-line utility for Shodan (https://developer.shodan.io).Shodan的Python库和命令行实用程序(https://developer.shodan.io)。
recon侦察shodanhatSearch for hosts info with shodan.使用shodan搜索主机信息。
recon侦察simplyemailEmail recon made fast and easy, with a framework to build on CyberSyndicates通过在Cyber​​Syndicates上构建的框架,可以快速轻松地进行电子邮件侦察
recon侦察sipiSimple IP Information Tools for Reputation Data Analysis.用于声誉数据分析的简单IP信息工具。
recon侦察smbcrunch3 tools that work together to simplify reconaissance of Windows File Shares.3个工具,它们协同工作以简化Windows文件共享的重新组合。
recon侦察smtp-user-enumUsername guessing tool primarily for use against the default Solaris SMTP service. Can use either EXPN, VRFY or RCPT TO.用户名猜测工具主要用于默认的Solaris SMTP服务。可以使用EXPN,VRFY或RCPT TO。
recon侦察spfmapA program to map out SPF and DKIM records for a large number of domains.用于为大量域映射SPF和DKIM记录的程序。
recon侦察spiderfootThe Open Source Footprinting Tool.开源足迹工具。
recon侦察spoofcheckSimple script that checks a domain for email protections.检查域以获取电子邮件保护的简单脚本。
recon侦察ssl-hostname-resolverCN (Common Name) grabber on X.509 Certificates over HTTPS.通过HTTPS获取X.509证书上的CN(公用名)抓取器。
recon侦察stardoxGithub stargazers information gathering tool.Github观星者信息收集工具。
recon侦察subdomainerA tool designed for obtaining subdomain names from public sources.用于从公共源获取子域名的工具。
recon侦察subfinderModular subdomain discovery tool that can discover massive amounts of valid subdomains for any target.模块化子域发现工具,可以为任何目标发现大量有效子域。
recon侦察sublist3rA Fast subdomains enumeration tool for penetration testers.用于渗透测试人员的快速子域名枚举工具。
recon侦察subscraperTool that performs subdomain enumeration through various techniques.通过各种技术执行子域枚举的工具。
recon侦察sysdigOpen source system-level exploration and troubleshooting tool开源系统级探索和故障排除工具
recon侦察theharvesterPython tool for gathering e-mail accounts and subdomain names from different public sources (search engines, pgp key servers).用于从不同公共源(搜索引擎,pgp密钥服务器)收集电子邮件帐户和子域名的Python工具。
recon侦察tiltAn easy and simple tool implemented in Python for ip reconnaissance, with reverse ip lookup.一个简单而简单的工具,在Python中用于ip侦察,具有反向ip查找功能。
recon侦察tinfoleakGet detailed information about a Twitter user activity.获取有关Twitter用户活动的详细信息。
recon侦察tinfoleak2The most complete open-source tool for Twitter intelligence analysis.用于Twitter智能分析的最完整的开源工具。
recon侦察tracerouteTracks the route taken by packets over an IP network跟踪IP网络上的数据包路由
recon侦察treasureHunt for sensitive information through githubs code search.通过githubs代码搜索寻找敏感信息。
recon侦察trufflehogSearches through git repositories for high entropy strings, digging deep into commit history.通过git存储库搜索高熵字符串,深入挖掘提交历史记录。
recon侦察trusttreesA Tool for DNS Delegation Trust Graphing.DNS委托信任图形工具。
recon侦察twofiTwitter Words of Interest.Twitter感兴趣的词。
recon侦察ubiquiti-probingA Ubiquiti device discovery tool.Ubiquiti设备发现工具。
recon侦察userreconFind usernames across over 75 social networks.查找超过75个社交网络的用户名。
recon侦察vbruteVirtual hosts brute forcer.虚拟主机蛮力。
recon侦察vpnpivotExplore the network using this tool.使用此工具探索网络。
recon侦察waldoA lightweight and multithreaded directory and subdomain bruteforcer implemented in Python.Python中实现的轻量级多线程目录和子域bruteforcer。
recon侦察websearchSearch vhost names given a host range. Powered by Bing..在给定主机范围的情况下搜索vhost名称。由Bing提供..
recon侦察whatwebNext generation web scanner that identifies what websites are running.下一代Web扫描程序,用于识别正在运行的网站。
recon侦察windows-exploit-suggesterThis tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target.此工具将目标修补程序级别与Microsoft漏洞数据库进行比较,以便检测目标上可能缺少的修补程序。
recon侦察xrayA tool for recon, mapping and OSINT gathering from public networks.用于从公共网络收集的侦察,映射和OSINT的工具。
recon侦察zeus-scannerAdvanced dork searching utility.高级傻瓜搜索工具。
recon侦察zgrabGrab banners (optionally over TLS).抓住横幅(可选择通过TLS)。
reversing倒车android-apktoolA tool for reverse engineering Android apk files.用于逆向工程Android apk文件的工具。
reversing倒车apkstudioAn IDE for decompiling/editing & then recompiling of android application binaries.用于反编译/编辑然后重新编译android应用程序二进制文件的IDE。
reversing倒车binaryninja-demoA new kind of reversing platform (demo version).一种新型的倒车平台(演示版)。
reversing倒车bsdiffbsdiff and bspatch are tools for building and applying patches to binary files.bsdiff和bspatch是用于构建和应用补丁到二进制文件的工具。
reversing倒车capstoneLightweight multi-platform, multi-architecture disassembly framework轻量级多平台,多架构反汇编框架
reversing倒车elidecodeA tool to decode obfuscated shellcodes using the unicorn-engine for the emulation and the capstone-engine to print the asm code.使用unicorn-engine进行仿真和capstone-engine来打印asm代码的解码混淆shellcode的工具。
reversing倒车flasmDisassembler tool for SWF bytecode用于SWF字节码的反汇编工具
reversing倒车fridaDynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.适用于开发人员,逆向工程师和安全研究人员的动态检测工具包。
reversing倒车frida-extractFrida.re based RunPE (and MapViewOfSection) extraction tool.Frida.re基于RunPE(和MapViewOfSection)提取工具。
reversing倒车ghidraA software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission.由NSA研究理事会开发的软件逆向工程(SRE)工具套件,用于支持网络安全任务。
reversing倒车jadJava decompilerJava反编译器
reversing倒车javasnoopA tool that lets you intercept methods, alter data and otherwise hack Java applications running on your computer一种工具,可让您拦截方法,更改数据以及破解计算机上运行的Java应用程序
reversing倒车jeb-androidAndroid decompiler.Android反编译器。
reversing倒车jeb-armArm decompiler.手臂反编译器。
reversing倒车jeb-intelIntel decompiler.英特尔反编译器。
reversing倒车jeb-mipsMips decompiler.Mips反编译器。
reversing倒车jeb-webasmWebAssembly decompiler.WebAssembly反编译器。
reversing倒车jwscanScanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe.Jar的扫描仪到EXE包装器,如Launch4j,Exe4j,JSmooth,Jar2Exe。
reversing倒车malwasmOffline debugger for malware's reverse engineering.用于恶意软件逆向工程的离线调试器。
reversing倒车mikrotik-npkPython tools for manipulating Mikrotik NPK format.用于操纵Mikrotik NPK格式的Python工具。
reversing倒车netzobAn open source tool for reverse engineering, traffic generation and fuzzing of communication protocols.用于逆向工程,流量生成和通信协议模糊测试的开源工具。
reversing倒车pintoolThis tool can be useful for solving some reversing challenges in CTFs events.该工具可用于解决CTF事件中的一些逆转挑战。
reversing倒车pintool2Improved version of pintool.改进版的pintool。
reversing倒车python-capstoneLightweight multi-platform, multi-architecture disassembly framework轻量级多平台,多架构反汇编框架
reversing倒车python-fridaDynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.适用于开发人员,逆向工程师和安全研究人员的动态检测工具包。
reversing倒车python-jsbeautifierJavaScript unobfuscator and beautifierJavaScript unobfuscator和美化
reversing倒车python2-capstoneLightweight multi-platform, multi-architecture disassembly framework轻量级多平台,多架构反汇编框架
reversing倒车python2-fridaDynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.适用于开发人员,逆向工程师和安全研究人员的动态检测工具包。
reversing倒车radare2Open-source tools to disasm, debug, analyze and manipulate binary files用于解析,调试,分析和操作二进制文件的开源工具
reversing倒车radare2-cutterQt and C++ GUI for radare2 reverse engineering framework用于radare2逆向工程框架的Qt和C ++ GUI
reversing倒车radare2-keystoneKeystone assembler plugins for radare2.用于radare2的Keystone汇编插件。
reversing倒车scanmemMemory scanner designed to isolate the address of an arbitrary variable in an executing process内存扫描程序旨在隔离执行过程中任意变量的地址
reversing倒车swfintruderFirst tool for testing security in Flash movies. A runtime analyzer for SWF external movies. It helps to find flaws in Flash.用于测试Flash电影中安全性的第一个工具。用于SWF外部电影的运行时分析器。它有助于找到Flash中的缺陷。
reversing倒车syms2elfA plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table.Hex-Ray IDA Pro和radare2的插件,用于将识别的符号导出到ELF符号表。
reversing倒车udis86A minimalistic disassembler library一个简约的反汇编程序库
scanner扫描器0traceA hop enumeration tool.跳跃枚举工具。
scanner扫描器a2svAuto Scanning to SSL Vulnerability.自动扫描到SSL漏洞。
scanner扫描器admsnmpADM SNMP audit scanner.ADM SNMP审核扫描程序。
scanner扫描器allthevhostsA vhost discovery tool that scrapes various web applications.一种vhost发现工具,可以抓取各种Web应用程序。
scanner扫描器amassIn-depth subdomain enumeration written in Go.用Go编写的深入子域枚举。
scanner扫描器apache-usersThis perl script will enumerate the usernames on a unix system that use the apache module UserDir.这个perl脚本将枚举使用apache模块UserDir的unix系统上的用户名。
scanner扫描器athena-ssl-scannerA SSL cipher scanner that checks all cipher codes. It can identify about 150 different ciphers.一种SSL密码扫描程序,用于检查所有密码。它可以识别大约150种不同的密码。
scanner扫描器atscanServer, Site and Dork Scanner.服务器,站点和Dork扫描仪。
scanner扫描器aws-extender-cliScript to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues.用于测试S3存储桶以及Google存储桶和Azure存储容器的脚本,用于解决常见的错误配置问题。
scanner扫描器barmieJava RMI enumeration and attack tool.Java RMI枚举和攻击工具。
scanner扫描器belatiThe Traditional Swiss Army Knife for OSINT.OSINT的传统瑞士军刀。
scanner扫描器bingooA Linux bash based Bing and Google Dorking Tool.基于Linux bash的Bing和Google Dorking工具。
scanner扫描器birpA tool that will assist in the security assessment of mainframe applications served over TN3270.一种有助于TN3270服务的大型机应用程序安全评估的工具。
scanner扫描器blackbox-scannerDork scanner & bruteforcing & hash cracker with blackbox framework.Dork扫描仪和bruteforcing&哈希饼干与blackbox框架。
scanner扫描器bleahA BLE scanner for "smart" devices hacking.用于“智能”设备黑客攻击的BLE扫描仪。
scanner扫描器blindySimple script to automate brutforcing blind sql injection vulnerabilities.简单的脚本,可以自动执行盲目的SQL注入漏洞。
scanner扫描器blutoRecon, Subdomain Bruting, Zone Transfers.Recon,Subdomain Bruting,Zone Transfers。
scanner扫描器braaA mass snmp scanner质量snmp扫描仪
scanner扫描器cameradarHacks its way into RTSP videosurveillance cameras.闯入RTSP视频监控摄像头。
scanner扫描器camscanA tool which will analyze the CAM table of Cisco switches to look for anamolies.一种工具,可以分析Cisco交换机的CAM表以查找anamolies。
scanner扫描器cangibrinaDashboard Finder.仪表板查找器。
scanner扫描器cecsterA tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocols.一种针对HDMI CEC(消费电子控制)和HEC(HDMI以太网通道)协议执行安全测试的工具。
scanner扫描器changemeA default credential scanner.默认凭据扫描程序。
scanner扫描器check-weak-dh-sshDebian OpenSSL weak client Diffie-Hellman Exchange checker.Debian OpenSSL弱客户端Diffie-Hellman Exchange检查器。
scanner扫描器chironAn all-in-one IPv6 Penetration Testing Framework.一体化IPv6渗透测试框架。
scanner扫描器cipherscanA very simple way to find out which SSL ciphersuites are supported by a target.一种非常简单的方法,可以找出目标支持哪些SSL密码套件。
scanner扫描器ciscosScans class A, B, and C networks for cisco routers which have telnet open and have not changed the default password from cisco.扫描已打开telnet并且未更改cisco的默认密码的cisco路由器的A,B和C类网络。
scanner扫描器clairVulnerability Static Analysis for Containers.容器的漏洞静态分析。
scanner扫描器climberCheck UNIX/Linux systems for privilege escalation.检查UNIX / Linux系统以获取权限提升。
scanner扫描器cloudflare-enumCloudflare DNS Enumeration Tool for Pentesters.用于Pentesters的Cloudflare DNS枚举工具。
scanner扫描器cloudsploitAWS security scanning checks.AWS安全扫描检查。
scanner扫描器cmsmapA python open source Content Management System scanner that automates the process of detecting security flaws of the most popular CMSs.一个python开源内容管理系统扫描程序,可自动检测最流行的CMS的安全漏洞。
scanner扫描器configpushThis is a tool to span /8-sized networks quickly sending snmpset requests with default or otherwise specified community string to Cisco devices.这是一个跨越/ 8大小网络的工具,可以快速向思科设备发送带有默认或其他指定社区字符串的snmpset请求。
scanner扫描器corstestA simple CORS misconfigurations checker.一个简单的CORS配置错误检查器。
scanner扫描器cpfinderSimple script that looks for administrative web interfaces.查找管理Web界面的简单脚本。
scanner扫描器crackmapexecA swiss army knife for pentesting Windows/Active Directory environments.用于测试Windows / Active Directory环境的瑞士军刀。
scanner扫描器creepyA geolocation information gatherer. Offers geolocation information gathering through social networking platforms.地理定位信息收集器。通过社交网络平台提供地理定位信息收集。
scanner扫描器ct-exposerAn OSINT tool that discovers sub-domains by searching Certificate Transparency logs一种OSINT工具,通过搜索证书透明度日志来发现子域
scanner扫描器cvecheckerThe goal of cvechecker is to report about possible vulnerabilities on your system, by scanning the installed software and matching the results with the CVE database.cvechecker的目标是通过扫描已安装的软件并将结果与​​CVE数据库相匹配来报告系统上可能存在的漏洞。
scanner扫描器d-tectPentesting the Modern Web.对现代网络进行测试。
scanner扫描器darkbingA tool written in python that leverages bing for mining data on systems that may be susceptible to SQL injection.一个用python编写的工具,利用bing挖掘可能易受SQL注入的系统上的数据。
scanner扫描器davtestTests WebDAV enabled servers by uploading test executable files, and then (optionally) uploading files which allow for command execution or other actions directly on the target通过上载测试可执行文件,然后(可选)上载允许命令执行或直接在目标上执行其他操作的文件来测试启用WebDAV的服务器
scanner扫描器dbusmapSimple utility for enumerating D-Bus endpoints, an nmap for D-Bus.枚举D-Bus端点的简单实用程序,D-Bus的nmap。
scanner扫描器dcrawlSimple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names.简单但智能的多线程Web爬虫,用于随机收集大量唯一域名列表。
scanner扫描器deblazeA remote method enumeration tool for flex servers用于Flex服务器的远程方法枚举工具
scanner扫描器delldracDellDRAC and Dell Chassis Discovery and Brute Forcer.DellDRAC和Dell Chassis Discovery和Brute Forcer。
scanner扫描器dhcpigEnhanced DHCPv4 and DHCPv6 exhaustion and fuzzing script written in python using scapy network library.使用scapy网络库在python中编写的增强的DHCPv4和DHCPv6耗尽和模糊测试脚本。
scanner扫描器dirbA web content scanner, brute forceing for hidden files.一个Web内容扫描程序,强制隐藏文件。
scanner扫描器dirbusterAn application designed to brute force directories and files names on web/application servers用于在Web /应用程序服务器上强制执行目录和文件名的应用程序
scanner扫描器dirscannerThis is a python script that scans webservers looking for administrative directories, php shells, and more.这是一个python脚本,它扫描Web服务器,寻找管理目录,php shell等。
scanner扫描器dmitryDeepmagic Information Gathering Tool. Gathers information about hosts. It is able to gather possible subdomains, email addresses, and uptime information and run tcp port scans, whois lookups, and more.Deepmagic信息收集工具。收集有关主机的信息。它能够收集可能的子域,电子邮件地址和正常运行时间信息,并运行tcp端口扫描,whois查找等。
scanner扫描器dnmapThe distributed nmap framework分布式nmap框架
scanner扫描器dns2geoipA simple python script that brute forces DNS and subsequently geolocates the found subdomains.一个简单的python脚本,强制DNS,然后对找到的子域进行地理定位。
scanner扫描器dnsaDNSA is a dns security swiss army knifeDNSA是一种安全瑞士军刀
scanner扫描器dnsbfSearch for available domain names in an IP range.搜索IP范围内的可用域名。
scanner扫描器dnsgoblinNasty creature constantly searching for DNS servers. It uses standard dns querys and waits for the replies.讨厌的生物不断搜索DNS服务器。它使用标准的dns查询并等待回复。
scanner扫描器dnspredictDNS prediction.DNS预测。
scanner扫描器dnstwistDomain name permutation engine for detecting typo squatting, phishing and corporate espionage.用于检测拼写错误,网络钓鱼和企业间谍活动的域名置换引擎。
scanner扫描器dockerscanDocker security analysis & hacking tools.Docker安全分析和黑客工具。
scanner扫描器dorkbotCommand-line tool to scan Google search results for vulnerabilities.用于扫描Google搜索结果中的漏洞的命令行工具。
scanner扫描器dorkmeTool designed with the purpose of making easier the searching of vulnerabilities with Google Dorks, such as SQL Injection vulnerabilities.设计工具的目的是使用Google Dorks更容易地搜索漏洞,例如SQL Injection漏洞。
scanner扫描器dpscanDrupal Vulnerabilty Scanner.Drupal Vulnerabilty扫描仪。
scanner扫描器driftnetListens to network traffic and picks out images from TCP streams it observes.侦听网络流量并从其观察到的TCP流中挑选出图像。
scanner扫描器dripperA fast, asynchronous DNS scanner; it can be used for enumerating subdomains and enumerating boxes via reverse DNS.快速的异步DNS扫描程序; 它可以用于通过反向DNS枚举子域和枚举框。
scanner扫描器dvcs-ripperRip web accessible (distributed) version control systems: SVN/GIT/BZR/CVS/HG.Rip web可访问(分布式)版本控制系统:SVN / GIT / BZR / CVS / HG。
scanner扫描器eazyThis is a small python tool that scans websites to look for PHP shells, backups, admin panels, and more.这是一个小型python工具,可扫描网站以查找PHP shell,备份,管理面板等。
scanner扫描器enum-sharesTool that enumerates shared folders across the network and under a custom user account.在整个网络和自定义用户帐户下枚举共享文件夹的工具。
scanner扫描器enumiaxAn IAX enumerator.IAX普查员。
scanner扫描器eternal-scannerAn internet scanner for exploit CVE-0144 (Eternal Blue).利用CVE-0144(永恒蓝色)的互联网扫描仪。
scanner扫描器faradayA new concept (IPE) Integrated Penetration-Test Environment a multiuser Penetration test IDE. Designed for distribution, indexation and analyze of the generated data during the process of a security audit.新概念(IPE)集成渗透测试环境多用户渗透测试IDE。设计用于在安全审计过程中分发,索引和分析生成的数据。
scanner扫描器fernmelderAsynchronous mass DNS scanner.异步海量DNS扫描程序。
scanner扫描器fgscannerAn advanced, opensource URL scanner.一个高级的开源URL扫描程序。
scanner扫描器fi6sIPv6 network scanner designed to be fast.IPv6网络扫描仪设计得很快。
scanner扫描器fierceA DNS scannerDNS扫描程序
scanner扫描器find-dnsA tool that scans networks looking for DNS servers.扫描寻找DNS服务器的网络的工具。
scanner扫描器findomainA tool that use Certificate Transparency logs to find subdomains.使用证书透明度日志查找子域的工具。
scanner扫描器flashscannerFlash XSS Scanner.Flash XSS扫描仪。
scanner扫描器flunym0usA Vulnerability Scanner for Wordpress and Moodle.Wordpress和Moodle的漏洞扫描程序。
scanner扫描器forkingportscannerSimple and fast forking port scanner written in perl. Can only scan on host at a time, the forking is done on the specified port range. Or on the default range of 1. Has the ability to scan UDP or TCP, defaults to tcp.用perl编写的简单快速的分叉端口扫描器。一次只能在主机上扫描,分叉在指定的端口范围内完成。或者在默认范围为1.能够扫描UDP或TCP,默认为tcp。
scanner扫描器fs-nyarlA network takeover & forensic analysis tool - useful to advanced PenTest tasks & for fun and profit.网络接管和取证分析工具 - 对高级PenTest任务和娱乐和利润非常有用。
scanner扫描器fsnoopA tool to monitor file operations on GNU/Linux systems by using the Inotify mechanism. Its primary purpose is to help detecting file race condition vulnerabilities and since version 3, to exploit them with loadable DSO modules (also called "payload modules" or "paymods").一种使用Inotify机制监视GNU / Linux系统上的文件操作的工具。其主要目的是帮助检测文件竞争条件漏洞,从版本3开始,利用可加载的DSO模块(也称为“有效负载模块”或“paymods”)来利用它们。
scanner扫描器ftp-spiderFTP investigation tool - Scans ftp server for the following: reveal entire directory tree structures, detect anonymous access, detect directories with write permissions, find user specified data within repository.FTP调查工具 - 扫描ftp服务器以获取以下信息:显示整个目录树结构,检测匿名访问,检测具有写权限的目录,在存储库中查找用户指定的数据。
scanner扫描器ftpscoutScans ftps for anonymous access.扫描ftps以进行匿名访问。
scanner扫描器gethsploitFinding Ethereum nodes which are vulnerable to RPC-attacks.查找容易受到RPC攻击的以太坊节点。
scanner扫描器gggooglescanA Google scraper which performs automated searches and returns results of search queries in the form of URLs or hostnames.Google抓取工具,可执行自动搜索并以网址或主机名的形式返回搜索查询结果。
scanner扫描器ghost-phisherGUI suite for phishing and penetration attacks用于网络钓鱼和渗透攻击的GUI套件
scanner扫描器gitrobReconnaissance tool for GitHub organizations.GitHub组织的侦察工具。
scanner扫描器gloomLinux Penetration Testing Framework.Linux渗透测试框架。
scanner扫描器grabbbClean, functional, and fast banner scanner.干净,实用,快速的横幅扫描仪。
scanner扫描器greenbone-security-assistantGreenbone Security Assistant (gsa) - OpenVAS web frontendGreenbone Security Assistant(gsa) - OpenVAS Web前端
scanner扫描器grepforrfiSimple script for parsing web logs for RFIs and Webshells v1.2用于解析RFI和Webshel​​l v1.2的Web日志的简单脚本
scanner扫描器gtp-scanA small python script that scans for GTP (GPRS tunneling protocol) speaking hosts.一个小的python脚本,扫描GTP(GPRS隧道协议)说话主机。
scanner扫描器habuPython Network Hacking Toolkit.Python网络黑客工具包。
scanner扫描器hakkuSimple framework that has been made for penetration testing tools.为渗透测试工具制作的简单框架。
scanner扫描器halberdHalberd discovers HTTP load balancers. It is useful for web application security auditing and for load balancer configuration testing.Halberd发现HTTP负载均衡器。它对Web应用程序安全审核和负载平衡器配置测试很有用。
scanner扫描器hbadThis tool allows you to test clients on the heartbleed bug.此工具允许您在heartbleed错误上测试客户端。
scanner扫描器hoppyA python script which tests http methods for configuration issues leaking information or just to see if they are enabled.一个python脚本,它测试http方法的配置问题泄漏信息或只是为了查看它们是否已启用。
scanner扫描器host-extractRuby script tries to extract all IP/Host patterns in page response of a given URL and JavaScript/CSS files of that URL.Ruby脚本尝试提取给定URL的页面响应中的所有IP /主机模式以及该URL的JavaScript / CSS文件。
scanner扫描器hsecscanA security scanner for HTTP response headers.用于HTTP响应标头的安全扫描程序。
scanner扫描器http-enumA tool to enumerate the enabled HTTP methods supported on a webserver.用于枚举Web服务器上支持的已启用HTTP方法的工具。
scanner扫描器httpsscannerA tool to test the strength of a SSL web server.用于测试SSL Web服务器强度的工具。
scanner扫描器iaxscanA Python based scanner for detecting live IAX/2 hosts and then enumerating (by bruteforce) users on those hosts.基于Python的扫描程序,用于检测实时IAX / 2主机,然后枚举(通过强力执行)这些主机上的用户。
scanner扫描器icmpquerySend and receive ICMP queries for address mask and current time.发送和接收地址掩码和当前时间的ICMP查询。
scanner扫描器iis-shortname-scannerAn IIS shortname Scanner.IIS短名称扫描程序。
scanner扫描器ike-scanA tool that uses IKE protocol to discover, fingerprint and test IPSec VPN servers使用IKE协议发现,指纹和测试IPSec VPN服务器的工具
scanner扫描器ilo4-toolboxToolbox for HPE iLO4 analysis.用于HPE iLO4分析的工具箱。
scanner扫描器infipA python script that checks output from netstat against RBLs from Spamhaus.一个python脚本,用于检查来自netstat的输出与来自Spamhaus的RBL。
scanner扫描器inurlbrAdvanced search in the search engines - Inurl scanner, dorker, exploiter.搜索引擎中的高级搜索 - Inurl扫描仪,dorker,开发者。
scanner扫描器ipscanA very fast IP address and port scanner.一个非常快速的IP地址和端口扫描器。
scanner扫描器iptvSearch and brute force illegal iptv server.搜索和暴力非法iptv服务器。
scanner扫描器ipv6toolkitSI6 Networks' IPv6 ToolkitSI6 Networks的IPv6工具包
scanner扫描器jaadasJoint Advanced Defect assEsment for android applications.针对Android应用程序的联合高级缺陷问题。
scanner扫描器knockSubdomain scanner.子域扫描程序。
scanner扫描器knxmapKNXnet/IP scanning and auditing tool for KNX home automation installations.用于KNX家庭自动化安装的KNXnet / IP扫描和审计工具。
scanner扫描器krbrelayxKerberos unconstrained delegation abuse toolkit.Kerberos无约束委托滥用工具包。
scanner扫描器kube-hunterHunt for security weaknesses in Kubernetes clusters.寻找Kubernetes集群中的安全漏洞。
scanner扫描器lafLogin Area Finder: scans host/s for login panels.登录区域查找器:扫描登录面板的主机/ s。
scanner扫描器ldapdomaindumpActive Directory information dumper via LDAP.通过LDAP的Active Directory信息转储程序。
scanner扫描器leaklookerFind open databases with Shodan.使用Shodan查找开放式数据库。
scanner扫描器letmefuckit-scannerScanner and Exploit Magento.扫描仪和漏洞利用Magento。
scanner扫描器leviathanA mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities.大规模审计工具包,具有广泛的服务发现,强力,SQ​​L注入检测和运行自定义漏洞利用功能。
scanner扫描器lfi-scannerThis is a simple perl script that enumerates local file inclusion attempts when given a specific target.这是一个简单的perl脚本,在给定特定目标时枚举本地文件包含尝试。
scanner扫描器lfisuiteTotally Automatic LFI Exploiter (+ Reverse Shell) and Scanner.完全自动LFI漏洞利用(+反向壳)和扫描仪。
scanner扫描器linenumScripted Local Linux Enumeration & Privilege Escalation Checks脚本本地Linux枚举和权限升级检查
scanner扫描器littleblackboxPenetration testing tool, search in a collection of thousands of private SSL keys extracted from various embedded devices.渗透测试工具,搜索从各种嵌入式设备中提取的数千个私有SSL密钥的集合。
scanner扫描器locasploitLocal enumeration and exploitation framework.本地枚举和开发框架。
scanner扫描器lotophagia relatively compact Perl script designed to scan remote hosts for default (or common) Lotus NSF and BOX databases.一个相对紧凑的Perl脚本,用于扫描远程主机的默认(或常见)Lotus NSF和BOX数据库。
scanner扫描器lte-cell-scannerLTE SDR cell scanner optimized to work with very low performance RF front ends (8bit A/D, 20dB noise figure).LTE SDR单元扫描器经过优化,可与极低性能的RF前端配合使用(8位A / D,20dB噪声系数)。
scanner扫描器lunarA UNIX security auditing tool based on several security frameworks.基于多个安全框架的UNIX安全审核工具。
scanner扫描器lynisSecurity and system auditing tool to harden Unix/Linux systems安全和系统审计工具,以加强Unix / Linux系统
scanner扫描器malignoAn open source penetration testing tool written in python, that serves Metasploit payloads. It generates shellcode with msfvenom and transmits it over HTTP or HTTPS.用python编写的开源渗透测试工具,用于Metasploit有效负载。它使用msfvenom生成shellcode并通过HTTP或HTTPS传输。
scanner扫描器maryamFull-featured Web Identification framework written in Python.用Python编写的全功能Web标识框架。
scanner扫描器masscanTCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutesTCP端口扫描程序,异步喷出SYN数据包,在5分钟内扫描整个Internet
scanner扫描器modscanA new tool designed to map a SCADA MODBUS TCP based network.一种新工具,用于映射基于SCADA MODBUS TCP的网络。
scanner扫描器mongoauditA powerful MongoDB auditing and pentesting tool .强大的MongoDB审计和测试工具。
scanner扫描器mssqlscanA small multi-threaded tool that scans for Microsoft SQL Servers.一种用于扫描Microsoft SQL Server的小型多线程工具。
scanner扫描器multiscannerModular file scanning/analysis framework.模块化文件扫描/分析框架。
scanner扫描器nbtscanNBTscan is a program for scanning IP networks for NetBIOS name information.NBTscan是一个用于扫描IP网络以获取NetBIOS名称信息的程序。
scanner扫描器netbios-share-scannerThis tool could be used to check windows workstations and servers if they have accessible shared resources.如果Windows工作站和服务器具有可访问的共享资源,则可以使用此工具检查它们。
scanner扫描器netscanTcp/Udp/Tor port scanner with: synpacket, connect TCP/UDP and socks5 (tor connection).Tcp / Udp / Tor端口扫描器:synpacket,连接TCP / UDP和socks5(tor连接)。
scanner扫描器netscan2Active / passive network scanner.主动/被动网络扫描仪。
scanner扫描器niktoA web server scanner which performs comprehensive tests against web servers for multiple itemsWeb服务器扫描程序,针对多个项目对Web服务器执行全面测试
scanner扫描器niliTool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing.网络扫描工具,中间人,协议逆向工程和模糊测试。
scanner扫描器nmapUtility for network discovery and security auditing用于网络发现和安全审核的实用程序
scanner扫描器nmbscanTool to scan the shares of a SMB/NetBIOS network, using the NMB/SMB/NetBIOS protocols.使用NMB / SMB / NetBIOS协议扫描SMB / NetBIOS网络共享的工具。
scanner扫描器nsec3mapA tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain.使用DNSSEC NSEC或NSEC3链枚举DNS区域的资源记录的工具。
scanner扫描器nsiaA website scanner that monitors websites in realtime in order to detect defacements, compliance violations, exploits, sensitive information disclosure and other issues.一种网站扫描仪,可以实时监控网站,以检测违规,合规违规,漏洞利用,敏感信息泄露和其他问题。
scanner扫描器o-saftA tool to show informations about SSL certificate and tests the SSL connection according given list of ciphers and various SSL configurations.一种工具,用于显示有关SSL证书的信息,并根据给定的密码列表和各种SSL配置测试SSL连接。
scanner扫描器ocsCompact mass scanner for Cisco routers with default telnet/enable passwords.用于Cisco路由器的紧凑型扫描仪,具有默认的telnet / enable密码。
scanner扫描器onetwopunchUse unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.使用unicornscan快速扫描所有打开的端口,然后将打开的端口传递给nmap以进行详细扫描。
scanner扫描器onionscanScan Onion Services for Security Issues.扫描洋葱服务以解决安全问题。
scanner扫描器openvas-managerA layer between the OpenVAS Scanner and various client applicationsOpenVAS Scanner与各种客户端应用程序之间的层
scanner扫描器openvas-scannerThe OpenVAS scanning DaemonOpenVAS扫描守护进程
scanner扫描器pakettoAdvanced TCP/IP Toolkit.高级TCP / IP工具包。
scanner扫描器panhuntSearches for credit card numbers (PANs) in directories.在目录中搜索信用卡号(PAN)。
scanner扫描器paranoicA simple vulnerability scanner written in Perl.一个用Perl编写的简单漏洞扫描程序。
scanner扫描器passhuntSearch drives for documents containing passwords.搜索包含密码的文档。
scanner扫描器pbscanFaster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.由于用户域TCP / IP堆栈使用,更快,更高效的无状态SYN扫描器和横幅抓取器。
scanner扫描器pcredzA tool that extracts credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, and more from a pcap file or from a live interface.提取信用卡号,NTLM(DCE-RPC,HTTP,SQL,LDAP等),Kerberos(AS-REQ Pre-Auth etype 23),HTTP Basic,SNMP,POP,SMTP,FTP,IMAP等的工具来自pcap文件或实时界面。
scanner扫描器pentestlyPython and Powershell internal penetration testing framework.Python和Powershell内部渗透测试框架。
scanner扫描器plcscanThis is a tool written in Python that will scan for PLC devices over s7comm or modbus protocols.这是一个用Python编写的工具,它将通过s7comm或modbus协议扫描PLC设备。
scanner扫描器pnscanA parallel network scanner that can be used to survey TCP network services.可用于调查TCP网络服务的并行网络扫描程序。
scanner扫描器poisonA fast, asynchronous syn and udp scanner.快速,异步的syn和udp扫描程序。
scanner扫描器ppscanYet another port scanner with HTTP and FTP tunneling support.另一个端口扫描器支持HTTP和FTP隧道。
scanner扫描器pradsIs a "Passive Real-time Asset Detection System".是“被动实时资产检测系统”。
scanner扫描器praedaAn automated data/information harvesting tool designed to gather critical information from various embedded devices.一种自动数据/信息收集工具,旨在从各种嵌入式设备中收集关键信息。
scanner扫描器proxycheckThis is a simple proxy tool that checks for the HTTP CONNECT method and grabs verbose output from a webserver.这是一个简单的代理工具,用于检查HTTP CONNECT方法并从Web服务器获取详细输出。
scanner扫描器proxyscanA security penetration testing tool to scan for hosts and ports through a Web proxy server.一种安全渗透测试工具,用于通过Web代理服务器扫描主机和端口。
scanner扫描器pyssltestA python multithreaded script to make use of Qualys ssllabs api to test SSL flaws.一个python多线程脚本,利用Qualys ssllabs api来测试SSL漏洞。
scanner扫描器pytbullA python based flexible IDS/IPS testing framework shipped with more than 300 tests.基于python的灵活IDS / IPS测试框架,附带300多个测试。
scanner扫描器pythempython2 penetration testing framework.python2渗透测试框架。
scanner扫描器python2-ldapdomaindumpActive Directory information dumper via LDAP.通过LDAP的Active Directory信息转储程序。
scanner扫描器ranger-scannerA tool to support security professionals to access and interact with remote Microsoft Windows based systems.支持安全专业人员访问基于Microsoft Windows的远程系统并与之交互的工具。
scanner扫描器rawrRapid Assessment of Web Resources. A web enumerator.快速评估Web资源。网络普查员。
scanner扫描器relay-scannerAn SMTP relay scanner.SMTP中继扫描程序。
scanner扫描器responderA LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.LLMNR和NBT-NS中毒,内置HTTP / SMB / MSSQL / FTP / LDAP流氓认证服务器,支持NTLMv1 / NTLMv2 / LMv2,扩展安全性NTLMSSP和基本HTTP身份验证。
scanner扫描器responder-multirelayA LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2 (multirelay version),LLMNR和NBT-NS中毒,内置HTTP / SMB / MSSQL / FTP / LDAP流氓认证服务器,支持NTLMv1 / NTLMv2 / LMv2(多中继版),
scanner扫描器routerhunterTool used to find vulnerable routers and devices on the Internet and perform tests.用于在Internet上查找易受攻击的路由器和设备并执行测试的工具。
scanner扫描器rtlizerSimple spectrum analyzer.简单的频谱分析仪
scanner扫描器rtlsdr-scannerA cross platform Python frequency scanning GUI for the OsmoSDR rtl-sdr library.用于OsmoSDR rtl-sdr库的跨平台Python频率扫描GUI。
scanner扫描器s3scannerScan for open S3 buckets and dump.扫描打开的S3存储桶并转储。
scanner扫描器sambascanAllows you to search an entire network or a number of hosts for SMB shares. It will also list the contents of all public shares that it finds.允许您搜索整个网络或多个主机以获取SMB共享。它还将列出它找到的所有公共共享的内容。
scanner扫描器sandmapNmap on steroids! Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.关于类固醇的Nmap!简单的CLI,能够运行纯Nmap引擎,31个模块,具有459个扫描配置文件。
scanner扫描器sandyAn open-source Samsung phone encryption assessment framework一个开源的三星手机加密评估框架
scanner扫描器sb0xA simple and Lightweight framework for Penetration testing.用于渗透测试的简单轻量级框架。
scanner扫描器scamperA tool that actively probes the Internet in order to analyze topology and performance.一种主动探测Internet以分析拓扑和性能的工具。
scanner扫描器scanlessUtility for using websites that can perform port scans on your behalf.用于使用可代表您执行端口扫描的网站的实用程序。
scanner扫描器scansshFast SSH server and open proxy scanner.快速SSH服务器和开放代理扫描程序。
scanner扫描器scout2Security auditing tool for AWS environments.适用于AWS环境的安全审核工具。
scanner扫描器scoutsuiteMulti-Cloud Security Auditing Tool.多云安全审计工具。
scanner扫描器scrape-dnsSearches for interesting cached DNS entries.搜索有趣的缓存DNS条目。
scanner扫描器sdnpwnAn SDN penetration testing toolkit.SDN渗透测试工具包。
scanner扫描器seatNext generation information digging application geared toward the needs of security professionals. It uses information stored in search engine databases, cache repositories, and other public resources to scan web sites for potential vulnerabilities.下一代信息挖掘应用程序,面向安全专业人员的需求。它使用存储在搜索引擎数据库,缓存存储库和其他公共资源中的信息来扫描网站以查找潜在的漏洞。
scanner扫描器shareenumTool to enumerate shares from Windows hosts.用于枚举Windows主机的共享的工具。
scanner扫描器sharesnifferNetwork share sniffer and auto-mounter for crawling remote file systems.用于爬网远程文件系统的网络共享嗅探器和自动安装程序。
scanner扫描器simple-lan-scanA simple python script that leverages scapy for discovering live hosts on a network.一个简单的python脚本,它利用scapy来发现网络上的实时主机。
scanner扫描器sipshockA scanner for SIP proxies vulnerable to Shellshock.用于SIP代理的扫描程序易受Shellshock攻击。
scanner扫描器smbexecA rapid psexec style attack with samba tools.使用samba工具进行快速的psexec风格攻击。
scanner扫描器smbmapA handy SMB enumeration tool.一个方便的SMB枚举工具。
scanner扫描器smbspiderA lightweight python utility for searching SMB/CIFS/Samba file shares.用于搜索SMB / CIFS / Samba文件共享的轻量级python实用程序。
scanner扫描器smodA modular framework with every kind of diagnostic and offensive feature you could need in order to pentest modbus protocol.一个模块化的框架,具有您可能需要的各种诊断和攻击功能,以便测试modbus协议。
scanner扫描器smtp-testAutomated testing of SMTP servers for penetration testing.自动测试SMTP服务器以进行渗透测试。
scanner扫描器smtp-vrfyAn SMTP Protocol Hacker.一个SMTP协议黑客。
scanner扫描器smtptxA very simple tool used for sending simple email and do some basic email testing from a pentester perspective.一个非常简单的工具,用于发送简单的电子邮件,并从pentester的角度进行一些基本的电子邮件测试。
scanner扫描器snmpenumAn snmp enumerator.一个snmp枚举器。
scanner扫描器snmpscanA free, multi-processes SNMP scanner.免费的多进程SNMP扫描程序。
scanner扫描器snoopbruteMultithreaded DNS recursive host brute-force tool.多线程DNS递归主机暴力工具。
scanner扫描器spartaPython GUI application which simplifies network infrastructure penetration testing by aiding the penetration tester in the scanning and enumeration phase.Python GUI应用程序,通过帮助渗透测试人员进行扫描和枚举阶段,简化了网络基础设施渗透测试。
scanner扫描器sqlivulscanThis will give you the SQLi Vulnerable Website Just by Adding the Dork.这将通过添加Dork为您提供SQLi易受攻击的网站。
scanner扫描器ssdp-scannerSSDP amplification scanner written in Python. Makes use of Scapy.用Python编写的SSDP放大扫描器。使用Scapy。
scanner扫描器ssh-auditSSH server auditing (banner, key exchange, encryption, mac, compression, compatbility, etc).SSH服务器审计(横幅,密钥交换,加密,mac,压缩,兼容性等)。
scanner扫描器ssh-user-enumSSH User Enumeration Script in Python Using The Timing Attack.使用时序攻击的Python中的SSH用户枚举脚本。
scanner扫描器sslcauditUtility to perform security audits of SSL/TLS clients.用于执行SSL / TLS客户端安全审核的实用程序。
scanner扫描器ssllabs-scanCommand-line client for the SSL Labs APIsSSL Labs API的命令行客户端
scanner扫描器sslmapA lightweight TLS/SSL cipher suite scanner.轻量级TLS / SSL密码套件扫描程序。
scanner扫描器sslscanA fast tools to scan SSL services, such as HTTPS to determine the ciphers that are supported扫描SSL服务的快速工具,例如HTTPS,以确定支持的密码
scanner扫描器sticky-keys-hunterScript to test an RDP host for sticky keys and utilman backdoor.用于测试RDP主机的粘滞密钥和utilman后门的脚本。
scanner扫描器stig-viewerXCCDF formatted SRGs and STIGs files viewer for SCAP validation tools.用于SCAP验证工具的XCCDF格式化SRG和STIG文件查看器。
scanner扫描器strikerAn offensive information and vulnerability scanner.令人反感的信息和漏洞扫描程序。
scanner扫描器strutscanApache Struts2 vulnerability scanner written in Perl.用Perl编写的Apache Struts2漏洞扫描程序。
scanner扫描器subbruteA DNS meta-query spider that enumerates DNS records and subdomainsDNS元查询蜘蛛,枚举DNS记录和子域
scanner扫描器suboverA Powerful Subdomain Takeover Tool.一个强大的子域名接管工具。
scanner扫描器svn-extractorA simple script to extract all web resources by means of .SVN folder exposed over network.一个简单的脚本,通过网络公开的.SVN文件夹提取所有Web资源。
scanner扫描器swarmA distributed penetration testing tool.分布式渗透测试工具。
scanner扫描器synscanfast asynchronous half-open TCP portscanner快速异步半开TCP口扫描程序
scanner扫描器tachyon-scannerFast Multi-Threaded Web Discovery Tool.快速多线程Web发现工具。
scanner扫描器tactical-exploitationModern tactical exploitation toolkit.现代战术开发工具包。
scanner扫描器taipanWeb application security scanner.Web应用安全扫描器。
scanner扫描器toperaAn IPv6 security analysis toolkit, with the particularity that their attacks can't be detected by Snort.一个IPv6安全分析工具包,具有Snort无法检测到其攻击的特殊性。
scanner扫描器udsimA graphical simulator that can emulate different modules in a vehicle and respond to UDS request.一种图形模拟器,可以模拟车辆中的不同模块并响应UDS请求。
scanner扫描器umapThe USB host security assessment tool.USB主机安全评估工具。
scanner扫描器unicornscanA new information gathering and correlation engine.一种新的信息收集和关联引擎。
scanner扫描器upnpscanScans the LAN or a given address range for UPnP capable devices.扫描LAN或给定UPnP设备的给定地址范围。
scanner扫描器uw-loveimapMulti threaded imap bounce scanner.多线程imap反弹扫描仪。
scanner扫描器uw-udpscanMulti threaded udp scanner.多线程udp扫描仪。
scanner扫描器uw-zoneMulti threaded, randomized IP zoner.多线程随机IP区域。
scanner扫描器v3n0mA tool to automate mass SQLi d0rk scans and Metasploit Vulns.一种自动化大规模SQLi d0rk扫描和Metasploit Vulns的工具。
scanner扫描器vaisSWF Vulnerability & Information Scanner.SWF漏洞和信息扫描程序。
scanner扫描器vaneA vulnerability scanner which checks the security of WordPress installations using a black box approach.一种漏洞扫描程序,使用黑盒方法检查WordPress安装的安全性。
scanner扫描器vcsmapA plugin-based tool to scan public version control systems for sensitive information.一种基于插件的工具,用于扫描公共版本控制系统以获取敏感信息。
scanner扫描器vhostscanA virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.虚拟主机扫描程序,可与数据透视工具一起使用,检测全能方案,别名和动态默认页面。
scanner扫描器videosnarfA new security assessment tool for pcap analysis用于pcap分析的新安全评估工具
scanner扫描器visqlScan SQL vulnerability on target site and sites of on server.扫描目标站点和服务器上的站点上的SQL漏洞。
scanner扫描器vscanHTTPS / Vulnerability scanner.HTTPS /漏洞扫描程序。
scanner扫描器vulmapVulmap Online Local Vulnerability Scanners ProjectVulmap联机本地漏洞扫描程序项目
scanner扫描器vulsVulnerability scanner for Linux/FreeBSD, agentless, written in Go.用于Linux / FreeBSD的漏洞扫描程序,无代理,用Go编写。
scanner扫描器vulscanA module which enhances nmap to a vulnerability scanner一个增强nmap到漏洞扫描程序的模块
scanner扫描器wafw00fIdentify and fingerprint Web Application Firewall (WAF) products protecting a website.识别并指纹保护网站的Web应用程序防火墙(WAF)产品。
scanner扫描器webenumTool to enumerate http responses using dynamically generated queries and more. Useful for penetration tests against web servers.使用动态生成的查询等枚举http响应的工具。对于Web服务器的渗透测试很有用。
scanner扫描器webhunterTool for scanning web applications and networks and easily completing the process of collecting knowledge.用于扫描Web应用程序和网络的工具,可轻松完成收集知识的过程。
scanner扫描器webpwn3rA python based Web Applications Security Scanner.基于python的Web应用程序安全扫描程序。
scanner扫描器webruteWeb server directory brute forcer.Web服务器目录暴力破解。
scanner扫描器whitewidowSQL Vulnerability Scanner.SQL漏洞扫描程序。
scanner扫描器wolpertingerA distributed portscanner.分布式端口扫描程序。
scanner扫描器wordpresscanWPScan rewritten in Python + some WPSeku ideas.WPScan用Python +改写了一些WPSeku的想法。
scanner扫描器xcnameA tool for enumerating expired domains in CNAME records.用于枚举CNAME记录中过期域的工具。
scanner扫描器xpire-crossdomain-scannerScans crossdomain.xml policies for expired domain names.扫描过期域名的crossdomain.xml策略。
scanner扫描器xsstracerPython script that checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection.Python脚本,用于检查远程Web服务器的Clickjacking,跨框架脚本,跨站点跟踪和主机头注入。
scanner扫描器yasatYet Another Stupid Audit Tool.又一个愚蠢的审计工具。
scanner扫描器zmapFast network scanner designed for Internet-wide network surveys专为全网络网络调查而设计的快速网络扫描仪
sniffer嗅探器bettercapSwiss army knife for network attacks and monitoring瑞士军刀用于网络攻击和监控
sniffer嗅探器bittwistA simple yet powerful libpcap-based Ethernet packet generator. It is designed to complement tcpdump, which by itself has done a great job at capturing network traffic.一个简单但功能强大的基于libpcap的以太网数据包生成器。它旨在补充tcpdump,它本身在捕获网络流量方面做得很好。
sniffer嗅探器capfuzzCapture, fuzz and intercept web traffic.捕获,模糊和拦截Web流量。
sniffer嗅探器cdpsnarfCisco discovery protocol sniffer.思科发现协议嗅探器。
sniffer嗅探器credsHarvest FTP/POP/IMAP/HTTP/IRC credentials along with interesting data from each of the protocols.收获FTP / POP / IMAP / HTTP / IRC凭证以及来自每个协议的有趣数据。
sniffer嗅探器darkstatNetwork statistics gatherer (packet sniffer)网络统计收集器(数据包嗅探器)
sniffer嗅探器dsniffCollection of tools for network auditing and penetration testing用于网络审计和渗透测试的工具集合
sniffer嗅探器eigrp-toolsThis is a custom EIGRP packet generator and sniffer developed to test the security and overall operation quality of this brilliant Cisco routing protocol.这是一个定制的EIGRP数据包生成器和嗅探器,用于测试这种出色的思科路由协议的安全性和整体操作质量。
sniffer嗅探器ettercapA network sniffer/interceptor/logger for ethernet LANs - console以太网LAN的网络嗅探器/拦截器/记录器 - 控制台
sniffer嗅探器firstorderA traffic analyzer to evade Empire communication from Anomaly-Based IDS.一种流量分析器,用于逃避基于Anomaly的IDS的Empire通信。
sniffer嗅探器hexinjectA very versatile packet injector and sniffer that provides a command-line framework for raw network access.一种非常通用的数据包注入器和嗅探器,为原始网络访问提供命令行框架。
sniffer嗅探器httpryA specialized packet sniffer designed for displaying and logging HTTP traffic.专门用于显示和记录HTTP流量的数据包嗅探器。
sniffer嗅探器httpsniffTool to sniff HTTP responses from TCP/IP based networks and save contained files locally for later review.用于从基于TCP / IP的网络嗅探HTTP响应并在本地保存包含的文件以供以后查看的工具。
sniffer嗅探器hubbit-snifferSimple application that listens for WIFI-frames and records the mac-address of the sender and posts them to a REST-api.简单的应用程序,侦听WIFI帧并记录发件人的mac-address并将其发布到REST-api。
sniffer嗅探器hungry-interceptorIntercepts data, does something with it, stores it.拦截数据,对其进行处理,存储数据。
sniffer嗅探器issniffInternet Session Sniffer.互联网会话嗅探器。
sniffer嗅探器junkieA modular packet sniffer and analyzer.模块化数据包嗅探器和分析器。
sniffer嗅探器katsnoopUtility that sniffs HTTP Basic Authentication information and prints the base64 decoded form.用于嗅探HTTP基本身份验证信息并打印base64解码形式的实用程序。
sniffer嗅探器mfsnifferA python script for capturing unencrypted TSO login credentials.用于捕获未加密的TSO登录凭据的python脚本。
sniffer嗅探器mitmerA man-in-the-middle and phishing attack tool that steals the victim's credentials of some web services like Facebook.一种中间人和网络钓鱼攻击工具,可以窃取受害者对Facebook等某些Web服务的凭据。
sniffer嗅探器motsMan on the Side Attack - experimental packet injection and detection.侧面攻击的人 - 实验包注入和检测。
sniffer嗅探器net-credsSniffs sensitive data from interface or pcap.从界面或pcap中嗅探敏感数据。
sniffer嗅探器netsniff-ngHigh performance Linux network sniffer for packet inspection用于数据包检测的高性能Linux网络嗅探器
sniffer嗅探器nsntracePerform network trace of a single process by using network namespaces.使用网络命名空间执行单个进程的网络跟踪。
sniffer嗅探器ofp-snifferAn OpenFlow sniffer to help network troubleshooting in production networks.OpenFlow嗅探器,可帮助生产网络中的网络故障排除。
sniffer嗅探器ostinatoAn open-source, cross-platform packet/traffic generator and analyzer with a friendly GUI. It aims to be "Wireshark in Reverse" and thus become complementary to Wireshark.一个开源的,跨平台的数据包/流量生成器和分析器,具有友好的GUI。它旨在成为“反向的Wireshark”,从而成为Wireshark的补充。
sniffer嗅探器passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup.一种网络嗅探器,记录所有DNS服务器回复,以便在被动DNS设置中使用。
sniffer嗅探器pcaptellerA tool designed for traffic manipulation and replay.专为交通操纵和重播而设计的工具。
sniffer嗅探器pth-toolkitModified version of the passing-the-hash tool collection made to work straight out of the box.传递哈希工具集合的修改版本直接开箱即用。
sniffer嗅探器pytacleAutomates the task of sniffing GSM frames自动化嗅探GSM帧的任务
sniffer嗅探器sipfferSIP protocol command line sniffer.SIP协议命令行嗅探器。
sniffer嗅探器snapceptionIntercept and decrypt all snapchats received over your network.拦截并解密通过网络收到的所有快照。
sniffer嗅探器sniffglueSecure multithreaded packet sniffer安全的多线程数据包嗅探器
sniffer嗅探器ssl-phuck3rAll in one script for Man-In-The-Middle attacks.用于中间人攻击的一体化脚本。
sniffer嗅探器ssldumpan SSLv3/TLS network protocol analyzerSSLv3 / TLS网络协议分析仪
sniffer嗅探器sslsniffA tool to MITM all SSL connections on a LAN and dynamically generate certs for the domains that are being accessed on the fly一种工具,用于MITM LAN上的所有SSL连接,并动态生成即时访问的域的证书
sniffer嗅探器stenographerA packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets.一种数据包捕获解决方案,旨在快速将所有数据包假脱机到磁盘,然后提供对这些数据包的子集的简单,快速访问。
sniffer嗅探器tcpickTCP stream sniffer and connection trackerTCP流嗅探器和连接跟踪器
sniffer嗅探器wifi-monitorPrints the IPs on your local network that're sending the most packets.打印本地网络上发送最多数据包的IP。
sniffer嗅探器wireshark-cliNetwork traffic and protocol analyzer/sniffer - CLI tools and data files网络流量和协议分析器/嗅探器 - CLI工具和数据文件
sniffer嗅探器wireshark-qtNetwork traffic and protocol analyzer/sniffer - Qt GUI网络流量和协议分析器/嗅探器 - Qt GUI
sniffer嗅探器xcavatorMan-In-The-Middle and phishing attack tool that steals the victim's credentials of some web services like Facebook.Man-In-The-Middle和网络钓鱼攻击工具窃取受害者的一些Web服务(如Facebook)的凭据。
social社会anontwiA free software python client designed to navigate anonymously on social networks. It supports Identi.ca and Twitter.com.一个免费的软件python客户端,旨在匿名浏览社交网络。它支持Identi.ca和Twitter.com。
social社会blackeyeThe most complete Phishing Tool, with 32 templates +1 customizable.最完整的网络钓鱼工具,可自定义32个模板+1。
social社会catphishFor phishing and corporate espionage.用于网络钓鱼和企业间谍活动。
social社会chameleonminiOfficial repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data.ChameleonMini的官方存储库,这是一款可自由编程的便携式NFC安全分析工具,可以模拟和克隆非接触式卡,读取RFID标签和嗅探/记录RF数据。
social社会crosslinkedLinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping.LinkedIn枚举工具,通过搜索引擎抓取从组织中提取有效的员工姓名。
social社会evilginxMan-in-the-middle attack framework used for phishing login credentials用于网络钓鱼登录凭据的中间人攻击框架
social社会facebashFacebook Brute Forcer in shellscript using TOR.Facebook Brute Forcer在使用TOR的shellscript中。
social社会facebrokSocial Engineering Tool Oriented to facebook.面向Facebook的社交工程工具。
social社会fluxionA security auditing and social-engineering research tool.安全审计和社会工程研究工具。
social社会gophishOpen-Source Phishing Framework.开源网络钓鱼框架。
social社会hemingwayA simple and easy to use spear phishing helper.一个简单易用的鱼叉式网络钓鱼助手。
social社会hiddeneyeModern phishing tool with advanced functionality.具有高级功能的现代网络钓鱼工具。
social社会pepeCollect information about email addresses from Pastebin.从Pastebin收集有关电子邮件地址的信息。
social社会phemailA python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test.一种python开源网络钓鱼电子邮件工具,可自动执行发送网络钓鱼电子邮件的过程,作为社交工程测试的一部分。
social社会phishingkithunterFind phishing kits which use your brand/organization's files and image'.查找使用您的品牌/组织的文件和图像的网络钓鱼工具包'。
social社会qrljackerQRLJacker is a highly customizable exploitation framework to demonstrate "QRLJacking Attack Vector".QRLJacker是一个高度可定制的开发框架,用于演示“QRLJacking攻击向量”。
social社会ravenA Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.一个Linkedin信息收集工具,可供测试人员使用,以使用Linkedin收集有关组织员工的信息。
social社会reelphishA Real-Time Two-Factor Phishing Tool.实时双因素网络钓鱼工具。
social社会seesIncrease the success rate of phishing attacks by sending emails to company users as if they are coming from the very same company's domain.通过向公司用户发送电子邮件来提高网络钓鱼攻击的成功率,就像它们来自同一公司的域一样。
social社会setSocial-engineer toolkit. Aimed at penetration testing around Social-Engineering.社会工程师工具包。旨在围绕社会工程的渗透测试。
social社会simpleemailspooferA simple Python CLI to spoof emails.一个简单的Python CLI来欺骗电子邮件。
social社会skiptracerOSINT python2 webscraping framework. Skipping the needs of API keys.OSINT python2 webscraping框架。跳过API密钥的需求。
social社会slackpirateSlack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace.Slack Enumeration和Extraction Tool - 从Slack工作区中提取敏感信息。
social社会social-mapperA social media enumeration and correlation tool.社交媒体枚举和关联工具。
social社会social-vuln-scannerGathers public information on companies to highlight social engineering risk.收集有关公司的公共信息,以突出社会工程风险。
social社会socialfishUltimate phishing tool with Ngrok integrated.Ngrok集成的终极网络钓鱼工具。
social社会spfA python tool designed to allow for quick recon and deployment of simple social engineering phishing exercises.一个python工具,旨在允许快速侦察和部署简单的社会工程网络钓鱼练习。
social社会trapePeople tracker on the Internet: OSINT analysis and research tool by Jose Pino.互联网上的人物跟踪器:Jose Pino的OSINT分析和研究工具。
social社会tweets-analyzerTweets metadata scraper & activity analyzer.推文元数据抓取器和活动分析器。
social社会weemanHTTP Server for phishing in python.用于python中的网络钓鱼的HTTP Server。
spoof欺骗admid-packADM DNS spoofing tools - Uses a variety of active and passive methods to spoof DNS packets. Very powerful.ADM DNS欺骗工具 - 使用各种主动和被动方法来欺骗DNS数据包。很强大。
spoof欺骗araneaA fast and clean dns spoofing tool.一个快速和干净的DNS欺骗工具。
spoof欺骗cisco-snmp-slapIP address spoofing tool in order to bypass an ACL protecting an SNMP service on Cisco IOS devices.IP地址欺骗工具,以绕过保护Cisco IOS设备上的SNMP服务的ACL。
spoof欺骗dns-spoofYet another DNS spoof utility.又一个DNS欺骗实用程序。
spoof欺骗evil-ssdpSpoof SSDP replies to phish for NetNTLM challenge/response on a network.欺骗SSDP回复网络上的NetNTLM挑战/响应的网络钓鱼。
spoof欺骗fakenetbiosA family of tools designed to simulate Windows hosts (NetBIOS) on a LAN.一系列旨在模拟LAN上的Windows主机(NetBIOS)的工具。
spoof欺骗inundatorAn ids evasion tool, used to anonymously inundate intrusion detection logs with false positives in order to obfuscate a real attack.一种ids逃避工具,用于匿名淹没入侵检测日志,并带有误报,以便混淆真正的攻击。
spoof欺骗lansA Multithreaded asynchronous packet parsing/injecting arp spoofer.一个多线程异步数据包解析/注入arp欺骗者。
spoof欺骗lsrtunnelSpoofs connections using source routed packets.使用源路由数据包进行欺骗连接。
spoof欺骗motsa-dns-spoofingManOnTheSideAttack-DNS Spoofing.ManOnTheSideAttack DNS Spoofing。
spoof欺骗multimacMultiple MACs on an adapter适配器上有多个MAC
spoof欺骗nbnspoofNBNSpoof - NetBIOS Name Service SpooferNBNSpoof - NetBIOS名称服务欺骗者
spoof欺骗netcommanderAn easy-to-use arp spoofing tool.易于使用的arp欺骗工具。
spoof欺骗rbndrSimple DNS Rebinding Service.简单的DNS重新绑定服务。
spoof欺骗smikims-arpspoofPerforms an ARP spoofing attack using the Linux kernel's raw sockets.使用Linux内核的原始套接字执行ARP欺骗攻击。
spoof欺骗sylkieIPv6 address spoofing with the Neighbor Discovery Protocol.使用邻居发现协议进行IPv6地址欺骗。
spoof欺骗synnerA custom eth->ip->tcp packet generator (spoofer) for testing firewalls and dos attacks.用于测试防火墙和dos攻击的自定义eth-> ip-> tcp数据包生成器(欺骗程序)。
stego隐秘matroschkaPython steganography tool to hide images or text in images.Python隐写术工具,用于隐藏图像中的图像或文本。
stego隐秘openpuffYet not another steganography SW.然而,不是另一个隐写术SW。
stego隐秘pngcheckVerifies the integrity of PNG, JNG and MNG files by checking the CRCs and decompressing the image data.通过检查CRC并解压缩图像数据来验证PNG,JNG和MNG文件的完整性。
stego隐秘silenteyeA cross-platform application design for an easy use of steganography.一种跨平台应用程序设计,可轻松使用隐写术。
stego隐秘stegdetectAn automated tool for detecting steganographic content in images.一种用于检测图像中的隐写内容的自动化工具。
stego隐秘stegolegoSimple program for using stegonography to hide data within BMP images.使用stegonography隐藏BMP图像中的数据的简单程序。
stego隐秘stegoveritasAutomatic image steganography analysis tool.自动图像隐写分析工具。
stego隐秘stegsolveSteganography Solver.隐写术解算器。
stego隐秘stepicA python image steganography tool.蟒蛇图像隐写术工具。
tunnel隧道chiselA fast TCP tunnel over HTTP.HTTP上的快速TCP隧道。
tunnel隧道chownatAllows two peers behind two separate NATs with no port forwarding and no DMZ setup on their routers to directly communicate with each other允许两个独立NAT后面的两个对等端没有端口转发,路由器上没有DMZ设置,可以直接相互通信
tunnel隧道corkscrewA tool for tunneling SSH through HTTP proxies用于通过HTTP代理隧道SSH的工具
tunnel隧道ctunnelTunnel and/or proxy TCP or UDP connections via a cryptographic tunnel.通过加密隧道的隧道和/或代理TCP或UDP连接。
tunnel隧道dns2tcpA tool for relaying TCP connections over DNS.用于通过DNS中继TCP连接的工具。
tunnel隧道fraud-bridgeICMP and DNS tunneling via IPv4 and IPv6.通过IPv4和IPv6实现ICMP和DNS隧道。
tunnel隧道httptunnelCreates a bidirectional virtual data connection tunnelled in HTTP requests创建在HTTP请求中隧道传输的双向虚拟数据连接
tunnel隧道icmptxIP over ICMP tunnel.IP over ICMP隧道。
tunnel隧道iodineTunnel IPv4 data through a DNS server通过DNS服务器隧道传输IPv4数据
tunnel隧道ip-https-toolsTools for the IP over HTTPS (IP-HTTPS) Tunneling Protocol.用于IP over HTTPS(IP-HTTPS)隧道协议的工具。
tunnel隧道matahariA reverse HTTP shell to execute commands on remote machines behind firewalls.反向HTTP shell,用于在防火墙后面的远程计算机上执行命令。
tunnel隧道morxtunelNetwork Tunneling using TUN/TAP interfaces over TCP tool.通过TCP工具使用TUN / TAP接口的网络隧道。
tunnel隧道multitunTunnel arbitrary traffic through an innocuous WebSocket.通过无害的WebSocket隧道任意流量。
tunnel隧道ngrokA tunneling, reverse proxy for developing and understanding networked, HTTP services.用于开发和理解网络HTTP服务的隧道,反向代理。
tunnel隧道proxytunnela program that connects stdin and stdout to a server somewhere on the network, through a standard HTTPS proxy通过标准HTTPS代理将stdin和stdout连接到网络某处的服务器的程序
tunnel隧道ptunnelA tool for reliably tunneling TCP connections over ICMP echo request and reply packets用于通过ICMP回送请求和回复数据包可靠地隧道连接TCP的工具
tunnel隧道sshtunnelPure python SSH tunnels (CLI)纯python SSH隧道(CLI)
tunnel隧道stegosipTCP tunnel over RTP/SIP.通过RTP / SIP的TCP隧道。
tunnel隧道udp2raw-tunnelAn Encrypted, Anti-Replay, Multiplexed UdP Tunnel, tunnels udp traffic through fake-tcp or icmp by using raw socket加密,反重播,多路复用UdP隧道,通过使用原始套接字通过fake-tcp或icmp隧道传输udp流量
tunnel隧道vsttVSTT is a multi-protocol tunneling tool. It accepts input by TCP stream sockets and FIFOs, and can send data via TCP, POP3, and ICMP tunneling.VSTT是一种多协议隧道工具。它接受TCP流套接字和FIFO的输入,并可以通过TCP,POP3和ICMP隧道发送数据。
tunnel隧道xfltreatTunnelling framework.隧道框架。
voipVOIPaceAutomated Corporate Enumerator. A simple yet powerful VoIP Corporate Directory enumeration tool that mimics the behavior of an IP Phone in order to download the name and extension entries that a given phone can display on its screen interface自动化公司调查员。一个简单但功能强大的VoIP公司目录枚举工具,模拟IP电话的行为,以便下载给定电话可在其屏幕界面上显示的名称和扩展条目
voipVOIPbluebox-ngA GPL VoIP/UC vulnerability scanner.GPL VoIP / UC漏洞扫描程序。
voipVOIPerase-registrationsAn IAX flooder.IAX flooder。
voipVOIPiltyAn interception phone system for VoIP network.一种用于VoIP网络的拦截电话系统。
voipVOIPisipInteractive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks.交互式SIP工具包,用于数据包操作,嗅探,中间人攻击,模糊测试,模拟dos攻击。
voipVOIPismeScans a VOIP environment, adapts to enterprise VOIP, and exploits the possibilities of being connected directly to an IP Phone VLAN.扫描VOIP环境,适应企业VOIP,并利用直接连接到IP电话VLAN的可能性。
voipVOIPmrsipSIP-Based Audit and Attack Tool.基于SIP的审计和攻击工具。
voipVOIPpcapsipdumpA tool for dumping SIP sessions (+RTP traffic, if available) to disk in a fashion similar to 'tcpdump -w' (format is exactly the same), but one file per sip session (even if there is thousands of concurrect SIP sessions).用于以类似于'tcpdump -w'的方式将SIP会话(+ RTP流量,如果可用)转储到磁盘的工具(格式完全相同),但每个sip会话一个文件(即使有数千个连续的SIP会话) )。
voipVOIPprotos-sipSIP test suite.SIP测试套件。
voipVOIPredirectpoisonA tool to poison a targeted issuer of SIP INVITE requests with 301 (i.e. Moved Permanently) redirection responses.使用301(即,永久移动)重定向响应来中毒SIP INVITE请求的目标发布者的工具。
voipVOIPrtp-floodRTP flooderRTP flooder
voipVOIPsiparmyknifeA small command line tool for developers and administrators of Session Initiation Protocol (SIP) applications.用于会话初始协议(SIP)应用程序的开发人员和管理员的小型命令行工具。
voipVOIPsipbruteA utility to perform dictionary attacks against the VoIP SIP Register hash.用于对VoIP SIP注册哈希执行字典攻击的实用程序。
voipVOIPsippA free Open Source test tool / traffic generator for the SIP protocol.用于SIP协议的免费开源测试工具/流量生成器。
voipVOIPsipptsSet of tools to audit SIP based VoIP Systems.用于审核基于SIP的VoIP系统的工具集。
voipVOIPsipsakA small command line tool for developers and administrators of Session Initiation Protocol (SIP) applications.用于会话初始协议(SIP)应用程序的开发人员和管理员的小型命令行工具。
voipVOIPstorm-ringThis simple tool is useful to test a PABX with "allow guest" parameter set to "yes" (in this scenario an anonymous caller could place a call).这个简单的工具可用于测试PABX,其中“allow guest”参数设置为“yes”(在这种情况下,匿名调用者可以发出调用)。
voipVOIPteardownCommand line tool to send a BYE request to tear down a call.命令行工具发送BYE请求以拆除呼叫。
voipVOIPvnakAim is to be the one tool a user needs to attack multiple VoIP protocols.目标是成为用户攻击多种VoIP协议所需的工具之一。
voipVOIPvoiperA VoIP security testing toolkit incorporating several VoIP fuzzers and auxilliary tools to assist the auditor.一个VoIP安全测试工具包,包含多个VoIP模糊器和辅助工具,以协助审计员。
voipVOIPvoipongA utility which detects all Voice Over IP calls on a pipeline, and for those which are G711 encoded, dumps actual conversation to seperate wave files.检测管道上所有Voice Over IP呼叫的实用程序,以及G711编码的实用程序,将实际会话转储为单独的wave文件。
voipVOIPvsauditVOIP Security Audit Framework.VOIP安全审计框架。
webappWeb应用程序0d1nWeb security tool to make fuzzing at HTTP inputs, made in C with libCurl.用于在HTTP输入进行模糊测试的Web安全工具,使用libCurl在C中创建。
webappWeb应用程序abuse-ssl-bypass-wafBypassing WAF by abusing SSL/TLS Ciphers.通过滥用SSL / TLS密码绕过WAF。
webappWeb应用程序adfindSimple admin panel finder for php,js,cgi,asp and aspx admin panels.用于php,js,cgi,asp和aspx管理面板的简单管理面板查找器。
webappWeb应用程序adminpagefinderThis python script looks for a large amount of possible administrative interfaces on a given site.此python脚本在给定站点上查找大量可能的管理接口。
webappWeb应用程序albatarA SQLi exploitation framework in Python.Python中的SQLi开发框架。
webappWeb应用程序anti-xssA XSS vulnerability scanner.XSS漏洞扫描程序。
webappWeb应用程序arachniA feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.功能齐全,模块化,高性能的Ruby框架,旨在帮助渗透测试人员和管理员评估Web应用程序的安全性。
webappWeb应用程序arjunHTTP parameter discovery suite.HTTP参数发现套件。
webappWeb应用程序astraAutomated Security Testing For REST API's.REST API的自动安全测试。
webappWeb应用程序bbqsqlSQL injection exploit tool.SQL注入漏洞利用工具。
webappWeb应用程序bbscanA tiny Batch weB vulnerability Scanner.一个很小的批量weB漏洞扫描程序。
webappWeb应用程序bing-lfi-rfiPython script for searching Bing for sites that may have local and remote file inclusion vulnerabilities.用于在Bing中搜索可能存在本地和远程文件包含漏洞的站点的Python脚本。
webappWeb应用程序blisqyExploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).在HTTP-Headers(MySQL / MariaDB)中利用基于时间的盲SQL注入。
webappWeb应用程序brutemapPenetration testing tool that automates testing accounts to the site's login page.渗透测试工具,可自动将帐户测试到站点的登录页面。
webappWeb应用程序brutexssCross-Site Scripting Bruteforcer.跨站点脚本Bruteforcer。
webappWeb应用程序bsqlbfBlind SQL Injection Brute Forcer.盲SQL注入蛮力。
webappWeb应用程序bsqlinjectorBlind SQL injection exploitation tool written in ruby.用ruby编写的盲SQL注入开发工具。
webappWeb应用程序c5scanVulnerability scanner and information gatherer for the Concrete5 CMS.Concrete5 CMS的漏洞扫描程序和信息收集程序。
webappWeb应用程序cansinaA python-based Web Content Discovery Tool.基于python的Web内容发现工具。
webappWeb应用程序chankroTool that generates a PHP capable of run a custom binary (like a meterpreter) or a bash script (p.e. reverse shell) bypassing disable_functions & open_basedir).生成PHP的工具可以运行自定义二进制文件(如计量器)或bash脚本(pe反向shell)绕过disable_functions和open_basedir)。
webappWeb应用程序cjexploiterDrag and Drop ClickJacking exploit development assistance tool.拖放ClickJacking利用开发辅助工具。
webappWeb应用程序cloudgetPython script to bypass cloudflare from command line. Built upon cfscrape module.Python脚本从命令行绕过cloudflare。基于cfscrape模块。
webappWeb应用程序cms-fewJoomla, Mambo, PHP-Nuke, and XOOPS CMS SQL injection vulnerability scanning tool written in Python.用Python编写的Joomla,Mambo,PHP-Nuke和XOOPS CMS SQL注入漏洞扫描工具。
webappWeb应用程序cmseekCMS (Content Management Systems) Detection and Exploitation suite.CMS(内容管理系统)检测和利用套件。
webappWeb应用程序cmsfuzzFuzzer for wordpress, cold fusion, drupal, joomla, and phpnuke.用于wordpress,冷聚变,drupal,joomla和phpnuke的模糊器。
webappWeb应用程序comissionWhiteBox CMS analysis.WhiteBox CMS分析。
webappWeb应用程序commixAutomated All-in-One OS Command Injection and Exploitation Tool.自动化一体化操作系统命令注入和利用工具。
webappWeb应用程序crawlicWeb recon tool (find temporary files, parse robots.txt, search folders, google dorks and search domains hosted on same server).Web侦察工具(查找临时文件,解析robots.txt,搜索文件夹,google dorks以及托管在同一服务器上的搜索域)。
webappWeb应用程序csrftesterThe OWASP CSRFTester Project attempts to give developers the ability to test their applications for CSRF flaws.OWASP CSRFTester项目试图让开发人员能够测试他们的应用程序是否存在CSRF缺陷。
webappWeb应用程序cybercrowlA Python Web path scanner tool.Python Web路径扫描程序工具。
webappWeb应用程序darkjumperThis tool will try to find every website that host at the same server at your target.此工具将尝试查找托管在目标服务器上的每个网站。
webappWeb应用程序davscanFingerprints servers, finds exploits, scans WebDAV.指纹服务器,发现漏洞,扫描WebDAV。
webappWeb应用程序dawnscannerA static analysis security scanner for ruby written web applications.用于ruby编写的Web应用程序的静态分析安全扫描程序。
webappWeb应用程序dff-scannerTool for finding path of predictable resource locations.用于查找可预测资源位置路径的工具。
webappWeb应用程序dirbleFast directory scanning and scraping tool.快速目录扫描和抓取工具。
webappWeb应用程序dirbuster-ngC CLI implementation of the Java dirbuster tool.Java Dirbuster工具的C CLI实现。
webappWeb应用程序dirhuntFind web directories without bruteforce.查找没有暴力的web目录。
webappWeb应用程序dirscraperOSINT Scanning tool which discovers and maps directories found in javascript files hosted on a website.OSINT扫描工具,可发现并映射网站上托管的javascript文件中的目录。
webappWeb应用程序dirsearchHTTP(S) directory/file brute forcer.HTTP(S)目录/文件暴力破解程序。
webappWeb应用程序domi-ownedA tool used for compromising IBM/Lotus Domino servers.用于危害IBM / Lotus Domino服务器的工具。
webappWeb应用程序doorkPassive Vulnerability Auditor.被动漏洞审计员。
webappWeb应用程序dorknetSelenium powered Python script to automate searching for vulnerable web apps.Selenium支持Python脚本,可自动搜索易受攻击的Web应用程序。
webappWeb应用程序droopescanA plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.基于插件的扫描程序,可帮助安全研究人员识别多个CMS的问题,主要是Drupal和Silverstripe。
webappWeb应用程序drupal-module-enumEnumerate on drupal modules.枚举drupal模块。
webappWeb应用程序drupalscanSimple non-intrusive Drupal scanner.简单的非侵入式Drupal扫描仪。
webappWeb应用程序drupwnDrupal enumeration & exploitation tool.Drupal枚举和开发工具。
webappWeb应用程序dsfsA fully functional File inclusion vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code.一个功能齐全的文件包含漏洞扫描程序(支持GET和POST参数),用100行代码编写。
webappWeb应用程序dsjsA fully functional JavaScript library vulnerability scanner written in under 100 lines of code.一个功能齐全的JavaScript库漏洞扫描程序,用100行代码编写。
webappWeb应用程序dsssA fully functional SQL injection vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code.一个功能齐全的SQL注入漏洞扫描程序(支持GET和POST参数),用100行代码编写。
webappWeb应用程序dsxsA fully functional Cross-site scripting vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code.一个功能齐全的跨站点脚本漏洞扫描程序(支持GET和POST参数),用100行代码编写。
webappWeb应用程序epicwebhoneypotTool which aims to lure attackers using various types of web vulnerability scanners by tricking them into believing that they have found a vulnerability on a host.该工具旨在通过欺骗他们相信他们在主机上发现了漏洞来诱使攻击者使用各种类型的Web漏洞扫描程序。
webappWeb应用程序eyewitnessDesigned to take screenshots of websites, provide some server header info, and identify default credentials if possible.旨在获取网站的屏幕截图,提供一些服务器标头信息,并在可能的情况下识别默认凭据。
webappWeb应用程序fbhtA Facebook Hacking ToolFacebook黑客工具
webappWeb应用程序ffufFast web fuzzer written in Go.用Go写的快速网络模糊器。
webappWeb应用程序fhttpThis is a framework for HTTP related attacks. It is written in Perl with a GTK interface, has a proxy for debugging and manipulation, proxy chaining, evasion rules, and more.这是HTTP相关攻击的框架。它是用Perl编写的,带有GTK接口,具有调试和操作的代理,代理链,规避规则等。
webappWeb应用程序filebusterAn extremely fast and flexible web fuzzer.一个非常快速和灵活的网络模糊器。
webappWeb应用程序fuxploiderTool that automates the process of detecting and exploiting file upload forms flaws.自动执行检测和利用文件上载过程的工具形成缺陷。
webappWeb应用程序ghost-pyWebkit based webclient (relies on PyQT).基于Webkit的webclient(依赖于PyQT)。
webappWeb应用程序gittoolsA repository with 3 tools for pwn'ing websites with .git repositories available'.一个包含3个工具的存储库,用于提供具有.git存储库的网站。
webappWeb应用程序gobusterDirectory/file & DNS busting tool written in Go.用Go编写的目录/文件和DNS破坏工具。
webappWeb应用程序golismeroOpensource web security testing framework.开源Web安全测试框架。
webappWeb应用程序gopherusTool generates gopher link for exploiting SSRF and gaining RCE in various servers.工具生成gopher链接以利用SSRF并在各种服务器中获得RCE。
webappWeb应用程序grabberA web application scanner. Basically it detects some kind of vulnerabilities in your website.Web应用程序扫描程序。基本上它会检测到您网站中的某些漏洞。
webappWeb应用程序htcapA web application analysis tool for detecting communications between javascript and the server.一种用于检测javascript和服务器之间通信的Web应用程序分析工具。
webappWeb应用程序httpforgeA set of shell tools that let you manipulate, send, receive, and analyze HTTP messages. These tools can be used to test, discover, and assert the security of Web servers, apps, and sites. An accompanying Python library is available for extensions.一组shell工具,可让您操作,发送,接收和分析HTTP消息。这些工具可用于测试,发现和断言Web服务器,应用程序和站点的安全性。随附的Python库可用于扩展。
webappWeb应用程序httppwnly"Repeater" style XSS post-exploitation tool for mass browser control.“Repeater”风格的XSS后期开发工具,适用于大众浏览器控制。
webappWeb应用程序jaidamPenetration testing tool that would take as input a list of domain names, scan them, determine if wordpress or joomla platform was used and finally check them automatically, for web vulnerabilities using two well-known open source tools, WPScan and Joomscan.渗透测试工具将输入域名列表,扫描它们,确定是否使用了wordpress或joomla平台,并最终自动检查它们,使用两个众所周知的开源工具WPScan和Joomscan进行Web漏洞检测。
webappWeb应用程序jastJust Another Screenshot Tool.只是另一个截图工具。
webappWeb应用程序jexbossJboss verify and Exploitation Tool.Jboss验证和利用工具。
webappWeb应用程序jok3rNetwork and Web Pentest Framework.网络和Web Pentest框架。
webappWeb应用程序jomplugThis php script fingerprints a given Joomla system and then uses Packet Storm's archive to check for bugs related to the installed components.这个php脚本指纹给定的Joomla系统,然后使用Packet Storm的存档来检查与已安装组件相关的错误。
webappWeb应用程序jooforceA Joomla password brute force tester.一个Joomla密码暴力测试仪。
webappWeb应用程序joomlascanJoomla scanner scans for known vulnerable remote file inclusion paths and files.Joomla扫描程序扫描已知易受攻击的远程文件包含路径和文件。
webappWeb应用程序joomlavsA black box, Ruby powered, Joomla vulnerability scanner.黑匣子,Ruby驱动,Joomla漏洞扫描程序。
webappWeb应用程序joomscanDetects file inclusion, sql injection, command execution vulnerabilities of a target Joomla! web site.检测文件包含,sql注入,目标Joomla的命令执行漏洞!网站。
webappWeb应用程序jshellGet a JavaScript shell with XSS.使用XSS获取JavaScript shell。
webappWeb应用程序jsql-injectionA Java application for automatic SQL database injection.用于自动SQL数据库注入的Java应用程序。
webappWeb应用程序jstilleryAdvanced JavaScript Deobfuscation via Partial Evaluation.通过部分评估进行高级JavaScript反模糊处理。
webappWeb应用程序kadimusLFI Scan & Exploit Tool.LFI扫描和利用工具。
webappWeb应用程序kolkataA web application fingerprinting engine written in Perl that combines cryptography with IDS evasion.用Perl编写的Web应用程序指纹识别引擎,它将密码学与IDS规避相结合。
webappWeb应用程序konanAdvanced Web Application Dir Scanner.高级Web应用程序目录扫描程序。
webappWeb应用程序lfi-exploiterThis perl script leverages /proc/self/environ to attempt getting code execution out of a local file inclusion vulnerability..此perl脚本利用/ proc / self / environ尝试从本地文件包含漏洞中获取代码。
webappWeb应用程序lfi-fuzzploitA simple tool to help in the fuzzing for, finding, and exploiting of local file inclusion vulnerabilities in Linux-based PHP applications.一个简单的工具,可帮助在基于Linux的PHP应用程序中进行模糊,查找和利用本地文件包含漏洞。
webappWeb应用程序lfi-image-helperA simple script to infect images with PHP Backdoors for local file inclusion attacks.使用PHP后门感染图像的简单脚本,用于本地文件包含攻击。
webappWeb应用程序lfi-sploiterThis tool helps you exploit LFI (Local File Inclusion) vulnerabilities. Post discovery, simply pass the affected URL and vulnerable parameter to this tool. You can also use this tool to scan a URL for LFI vulnerabilities.此工具可帮助您利用LFI(本地文件包含)漏洞。发布后,只需将受影响的URL和易受攻击的参数传递给此工具。您还可以使用此工具扫描URL以查找LFI漏洞。
webappWeb应用程序lfifreakA unique automated LFi Exploiter with Bind/Reverse Shells.独特的自动LFi探索器,带有绑定/反向壳。
webappWeb应用程序lfimapThis script is used to take the highest beneficts of the local file include vulnerability in a webserver.此脚本用于获取Web服务器中本地文件包含漏洞的最高优势。
webappWeb应用程序liffyA Local File Inclusion Exploitation tool.本地文件包含漏洞利用工具。
webappWeb应用程序lightbulbPython framework for auditing web applications firewalls.用于审核Web应用程序防火墙的Python框架。
webappWeb应用程序linkfinderDiscovers endpoint and their parameters in JavaScript files.在JavaScript文件中发现端点及其参数。
webappWeb应用程序list-urlsExtracts links from webpage.从网页中提取链接。
webappWeb应用程序magescanScan a Magento site for information.扫描Magento站点以获取信息。
webappWeb应用程序mando.meWeb Command Injection Tool.Web命令注入工具。
webappWeb应用程序metoscanTool for scanning the HTTP methods supported by a webserver. It works by testing a URL and checking the responses for the different requests.用于扫描Web服务器支持的HTTP方法的工具。它的工作原理是测试URL并检查不同请求的响应。
webappWeb应用程序mooscanA scanner for Moodle LMS.Moodle LMS的扫描仪。
webappWeb应用程序morxtraversalPath Traversal checking tool.路径遍历检查工具。
webappWeb应用程序multiinjectorAutomatic SQL injection utility using a lsit of URI addresses to test parameter manipulation.自动SQL注入实用程序使用lsit的URI地址来测试参数操作。
webappWeb应用程序nosqlmapAutomated Mongo database and NoSQL web application exploitation tool自动Mongo数据库和NoSQL Web应用程序开发工具
webappWeb应用程序novahotA webshell framework for penetration testers.用于穿透测试仪的webshel​​l框架。
webappWeb应用程序okadminfinderTool to find admin panels / admin login pages.查找管理面板/管理员登录页面的工具。
webappWeb应用程序opendoorOWASP WEB Directory Scanner.OWASP WEB目录扫描程序。
webappWeb应用程序owasp-bywafA web application penetration testing framework (WAPTF).Web应用程序渗透测试框架(WAPTF)。
webappWeb应用程序owtfThe Offensive (Web) Testing Framework.攻击性(网络)测试框架。
webappWeb应用程序pappy-proxyAn intercepting proxy for web application testing.用于Web应用程序测试的拦截代理。
webappWeb应用程序paramethThis tool can be used to brute discover GET and POST parameters.此工具可用于发现GET和POST参数。
webappWeb应用程序parampampamThis tool for brute discover GET and POST parameters.这个用于粗暴发现GET和POST参数的工具。
webappWeb应用程序parosJava-based HTTP/HTTPS proxy for assessing web app vulnerabilities. Supports editing/viewing HTTP messages on-the-fly, spiders, client certificates, proxy-chaining, intelligent scanning for XSS and SQLi, etc.基于Java的HTTP / HTTPS代理,用于评估Web应用程序漏洞。支持即时编辑/查看HTTP消息,蜘蛛,客户端证书,代理链,XSS和SQLi的智能扫描等。
webappWeb应用程序payloadmaskWeb Payload list editor to use techniques to try bypass web application firewall.Web Payload列表编辑器使用技术尝试绕过Web应用程序防火墙。
webappWeb应用程序peepingtomA tool to take screenshots of websites. Much like eyewitness.截取网站截图的工具。很像目击者。
webappWeb应用程序photonIncredibly fast crawler which extracts urls, emails, files, website accounts and much more.令人难以置信的快速爬虫,可以提取网址,电子邮件,文件,网站帐户等等。
webappWeb应用程序php-findsock-shellA Findsock Shell implementation in PHP + C.PHP + C中的Findsock Shell实现
webappWeb应用程序phpsploitStealth post-exploitation framework.隐形后开发框架。
webappWeb应用程序plecostWordpress finger printer Tool.Wordpress手指打印机工具。
webappWeb应用程序plownA security scanner for Plone CMS.Plone CMS的安全扫描程序。
webappWeb应用程序pownSecurity testing and exploitation toolkit built on top of Node.js and NPM.基于Node.js和NPM构建的安全测试和利用工具包。
webappWeb应用程序proxenetTHE REAL hacker friendly proxy for web application pentests.真正的黑客友好代理网络应用程序测试。
webappWeb应用程序pyfiscanFree web-application vulnerability and version scanner.免费的Web应用程序漏洞和版本扫描程序。
webappWeb应用程序python2-jsbeautifierJavaScript unobfuscator and beautifier.JavaScript unobfuscator和美化。
webappWeb应用程序python2-webtechIdentify technologies used on websites.识别网站上使用的技术。
webappWeb应用程序rapidscanThe Multi-Tool Web Vulnerability Scanner.多工具Web漏洞扫描程序。
webappWeb应用程序remot3dAn Simple Exploit for PHP Language.PHP语言的简单漏洞。
webappWeb应用程序riwifshellWeb backdoor - infector - explorer.Web后门 - 传染者 - 探险家。
webappWeb应用程序rulerA tool to abuse Exchange services.滥用Exchange服务的工具。
webappWeb应用程序rustbusterDirBuster for Rust.DirBuster for Rust。
webappWeb应用程序rww-attackThe Remote Web Workplace Attack tool will perform a dictionary attack against a live Microsoft Windows Small Business Server's 'Remote Web Workplace' portal. It currently supports both SBS 2003 and SBS 2008 and includes features to avoid account lock out.远程Web工作区攻击工具将对实时Microsoft Windows Small Business Server的“远程Web工作区”门户执行字典攻击。它目前支持SBS 2003和SBS 2008,并包含避免帐户锁定的功能。
webappWeb应用程序sawefSend Attack Web Forms.发送攻击Web表单。
webappWeb应用程序scanqliSQLi scanner to detect SQL vulns.SQLi扫描程序检测SQL漏洞。
webappWeb应用程序scrapyA fast high-level scraping and web crawling framework.一个快速的高级抓取和网络爬行框架。
webappWeb应用程序secscanWeb Apps Scanner and Much more utilities.Web Apps Scanner和更多实用程序。
webappWeb应用程序shortfuzzyA web fuzzing script written in perl.用perl编写的web fuzzing脚本。
webappWeb应用程序sitadelWeb Application Security Scanner.Web应用程序安全扫描程序。
webappWeb应用程序sitediffFingerprint a web app using local files as the fingerprint sources.使用本地文件作为指纹源指纹Web应用程序。
webappWeb应用程序skipfishA fully automated, active web application security reconnaissance tool.一种全自动,活跃的Web应用程序安全侦察工具。
webappWeb应用程序smplshllctrlrPHP Command Injection exploitation tool.PHP命令注入开发工具。
webappWeb应用程序snallygasterTool to scan for secret files on HTTP servers.用于扫描HTTP服务器上的机密文件的工具。
webappWeb应用程序snuckAutomatic XSS filter bypass.自动XSS过滤器旁路。
webappWeb应用程序spafStatic Php Analysis and Fuzzer.静态Php分析和模糊器。
webappWeb应用程序spartyAn open source tool written in python to audit web applications using sharepoint and frontpage architecture.一个用python编写的开源工具,用于使用sharepoint和frontpage架构审计Web应用程序。
webappWeb应用程序spigaConfigurable web resource scanner.可配置的Web资源扫描程序。
webappWeb应用程序spike-proxyA Proxy for detecting vulnerabilities in web applications用于检测Web应用程序中的漏洞的代理
webappWeb应用程序spipscanSPIP (CMS) scanner for penetration testing purpose written in Python.SPIP(CMS)扫描程序,用于以Python编写的渗透测试目的。
webappWeb应用程序sqidA SQL injection digger.一个SQL注入挖掘机。
webappWeb应用程序sqlmapAutomatic SQL injection and database takeover tool自动SQL注入和数据库接管工具
webappWeb应用程序themoleAutomatic SQL injection exploitation tool.自动SQL注入开发工具。
webappWeb应用程序tplmapAutomatic Server-Side Template Injection Detection and Exploitation Tool.自动服务器端模板注入检测和利用工具。
webappWeb应用程序typo-enumeratorEnumerate Typo3 version and extensions.枚举Typo3版本和扩展。
webappWeb应用程序uncaptcha2Defeating the latest version of ReCaptcha with 91% accuracy.以91%的准确率击败最新版本的ReCaptcha。
webappWeb应用程序uppwnA script that automates detection of security flaws on websites' file upload systems'.一个自动检测网站文件上传系统安全漏洞的脚本。
webappWeb应用程序urlcrazyGenerate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.生成并测试域名拼写错误和变体,以检测和执行拼写错误,URL劫持,网络钓鱼和企业间谍活动。
webappWeb应用程序urldiggerA python tool to extract URL addresses from different HOT sources and/or detect SPAM and malicious code一种python工具,用于从不同的HOT源提取URL地址和/或检测垃圾邮件和恶意代码
webappWeb应用程序vanguardA comprehensive web penetration testing tool written in Perl thatidentifies vulnerabilities in web applications.用Perl编写的综合Web渗透测试工具可识别Web应用程序中的漏洞。
webappWeb应用程序vbscanA black box vBulletin vulnerability scanner written in perl.用perl编写的黑匣子vBulletin漏洞扫描程序。
webappWeb应用程序vegaAn open source platform to test the security of web applications.一个开源平台,用于测试Web应用程序的安全性。
webappWeb应用程序vsvbpBlack box tool for Vulnerability detection in web applications.用于Web应用程序中漏洞检测的黑盒工具。
webappWeb应用程序vulnerabilities-spiderA tool to scan for web vulnerabilities.用于扫描Web漏洞的工具。
webappWeb应用程序vulnxCms and vulnerabilites detector & An intelligent bot auto shell injector.Cms和漏洞检测器和智能机器人自动壳体注射器。
webappWeb应用程序wafninjaA tool which contains two functions to attack Web Application Firewalls.一种工具,包含两个攻击Web应用程序防火墙的功能。
webappWeb应用程序wafpAn easy to use Web Application Finger Printing tool written in ruby using sqlite3 databases for storing the fingerprints.一个易于使用的Web应用程序指纹打印工具,使用sqlite3数据库以ruby编写,用于存储指纹。
webappWeb应用程序wafpassAnalysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.使用所有有效负载的旁路方法分析参数,旨在对像WAF这样的安全解决方案进行基准测试。
webappWeb应用程序wascanWeb Application Scanner.Web应用程序扫描程序。
webappWeb应用程序waybackpackDownload the entire Wayback Machine archive for a given URL.下载给定URL的整个Wayback Machine存档。
webappWeb应用程序web-soulA plugin based scanner for attacking and data mining web sites written in Perl.一种基于插件的扫描程序,用于攻击和数据挖掘用Perl编写的网站。
webappWeb应用程序webanalyzePort of Wappalyzer (uncovers technologies used on websites) in go to automate scanning.Wappalyzer端口(揭示网站上使用的技术)进行自动扫描。
webappWeb应用程序webborerA directory-enumeration tool written in Go.用Go编写的目录枚举工具。
webappWeb应用程序webhandlerA handler for PHP system functions & also an alternative 'netcat' handler.PHP系统函数的处理程序以及另一个'netcat'处理程序。
webappWeb应用程序webslayerA tool designed for brute forcing Web Applications.专为强制Web应用程序而设计的工具。
webappWeb应用程序webtechIdentify technologies used on websites.识别网站上使用的技术。
webappWeb应用程序webxploiterAn OWASP Top 10 Security scanner.OWASP十大安全扫描程序。
webappWeb应用程序weevelyWeaponized web shell.武器化网壳。
webappWeb应用程序whatsmynameTool to perform user and username enumeration on various websites.在各种网站上执行用户和用户名枚举的工具。
webappWeb应用程序whichcdnTool to detect if a given website is protected by a Content Delivery Network.用于检测给定网站是否受内容分发网络保护的工具。
webappWeb应用程序wigWebApp Information Gatherer.WebApp信息收集器。
webappWeb应用程序witchxtoolA perl script that consists of a port scanner, LFI scanner, MD5 bruteforcer, dork SQL injection scanner, fresh proxy scanner, and a dork LFI scanner.一个perl脚本,包括端口扫描程序,LFI扫描程序,MD5 bruteforcer,dork SQL注入扫描程序,新代理扫描程序和dork LFI扫描程序。
webappWeb应用程序wordpress-exploit-frameworkA Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.用于开发和使用模块的Ruby框架,有助于对WordPress驱动的网站和系统进行渗透测试。
webappWeb应用程序wpforceWordpress Attack Suite.Wordpress攻击套件。
webappWeb应用程序wpintelChrome extension designed for WordPress Vulnerability Scanning and information gathering.Chrome扩展程序专为WordPress漏洞扫描和信息收集而设计。
webappWeb应用程序wpscanBlack box WordPress vulnerability scanner黑匣子WordPress漏洞扫描程序
webappWeb应用程序wpsekuSimple Wordpress Security Scanner.简单的Wordpress安全扫描仪。
webappWeb应用程序ws-attackerA modular framework for web services penetration testing.用于Web服务渗透测试的模块化框架。
webappWeb应用程序wssipApplication for capturing, modifying and sending custom WebSocket data from client to server and vice versa.应用程序从客户端到服务器捕获,修改和发送自定义WebSocket数据,反之亦然。
webappWeb应用程序wuzzInteractive cli tool for HTTP inspection.用于HTTP检查的交互式cli工具。
webappWeb应用程序xattackerWebsite Vulnerability Scanner & Auto Exploiter.网站漏洞扫描程序和自动漏洞利用程序。
webappWeb应用程序xsrfprobeThe Prime Cross Site Request Forgery Audit and Exploitation Toolkit.Prime Cross Site请求伪造审计和利用工具包。
webappWeb应用程序xssconSimple XSS Scanner tool.简单的XSS扫描仪工具。
webappWeb应用程序xsscrapyXSS spider - 66/66 wavsep XSS detected.XSS spider - 检测到66/66 wavsep XSS。
webappWeb应用程序xsserA penetration testing tool for detecting and exploiting XSS vulnerabilites.用于检测和利用XSS漏洞的渗透测试工具。
webappWeb应用程序xsslessAn automated XSS payload generator written in python.用python编写的自动XSS有效负载生成器。
webappWeb应用程序xsspyWeb Application XSS Scanner.Web应用程序XSS扫描程序。
webappWeb应用程序xsssA brute force cross site scripting scanner.蛮力跨站点脚本扫描程序。
webappWeb应用程序xssscanCommand line tool for detection of XSS attacks in URLs. Based on ModSecurity rules from OWASP CRS.用于检测URL中的XSS攻击的命令行工具。基于OWASP CRS的ModSecurity规则。
webappWeb应用程序xsssniperAn automatic XSS discovery tool自动XSS发现工具
webappWeb应用程序xsstrikeAn advanced XSS detection and exploitation suite.先进的XSS检测和开发套件。
webappWeb应用程序xssyaA Cross Site Scripting Scanner & Vulnerability Confirmation.跨站点脚本扫描程序和漏洞确认。
webappWeb应用程序xwafAutomatic WAF bypass tool.自动WAF旁路工具。
webappWeb应用程序yaafYet Another Admin Finder.另一个管理员查找器。
webappWeb应用程序yasuoA ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network.一个ruby脚本,用于扫描网络上易受攻击且可利用的第三方Web应用程序。
webappWeb应用程序yawastThe YAWAST Antecedent Web Application Security Toolkit.YAWAST Antecedent Web应用程序安全工具包。
webappWeb应用程序ycrawlerA web crawler that is useful for grabbing all user supplied input related to a given website and will save the output. It has proxy and log file support.一种网络爬虫,可用于获取与给定网站相关的所有用户提供的输入,并将保存输出。它具有代理和日志文件支持。
webappWeb应用程序ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.用于生成利用不安全Java对象反序列化的有效负载的概念验证工具。
webappWeb应用程序zaproxyIntegrated penetration testing tool for finding vulnerabilities in web applications集成的渗透测试工具,用于查找Web应用程序中的漏洞
windows视窗3proxy-win32Tiny free proxy server.微小的免费代理服务器。
windows视窗agafiA gadget finder and a ROP-Chainer tool for x86 platforms.适用于x86平台的小工具查找程序和ROP-Chainer工具。
windows视窗analyzepesigAnalyze digital signature of PE file.分析PE文件的数字签名。
windows视窗antiransomA tool capable of detect and stop attacks of Ransomware using honeypots.一种能够使用蜜罐检测和阻止勒索软件攻击的工具。
windows视窗atstaketoolsThis is an archive of various @Stake tools that help perform vulnerability scanning and analysis, information gathering, password auditing, and forensics.这是各种@Stake工具的存档,可帮助执行漏洞扫描和分析,信息收集,密码审核和取证。
windows视窗backorificeA remote administration system which allows a user to control a computer across a tcpip connection using a simple console or GUI application.一种远程管理系统,允许用户使用简单的控制台或GUI应用程序跨tcpip连接控制计算机。
windows视窗browselistRetrieves the browse list ; the output list contains computer names, and the roles they play in the network.检索浏览列表; 输出列表包含计算机名称以及它们在网络中扮演的角色。
windows视窗brute12A tool designed for auditing the cryptography container security in PKCS12 format.用于审核PKCS12格式的加密容器安全性的工具。
windows视窗brutusOne of the fastest, most flexible remote password crackers you can get your hands on.您可以亲身体验最快,最灵活的远程密码破解程序之一。
windows视窗cachedumpA tool that demonstrates how to recover cache entry information: username and hashed password (called MSCASH).演示如何恢复缓存条目信息的工具:用户名和散列密码(称为MSCASH)。
windows视窗chrome-decodeChrome web browser decoder tool that demonstrates recovering passwords.Chrome网络浏览器解码器工具,用于演示恢复密码。
windows视窗chromensicsA Google chrome forensics tool.Google Chrome取证工具。
windows视窗dark-dork-searcherDark-Dork Searcher.Dark-Dork Searcher。
windows视窗de4dot.NET deobfuscator and unpacker..NET反混淆器和解包器。
windows视窗directorytraversalscanDetect directory traversal vulnerabilities in HTTP servers and web applications.检测HTTP服务器和Web应用程序中的目录遍历漏洞。
windows视窗dnspy.NET debugger and assembly editor..NET调试器和程序集编辑器。
windows视窗dotpeekFree .NET Decompiler and Assembly Browser.免费的.NET反编译器和汇编浏览器。
windows视窗dumpaclDumps NTs ACLs and audit settings.转储NTs ACL和审核设置。
windows视窗dumpusersDumps account names and information even though RestrictAnonymous has been set to 1.即使RestrictAnonymous已设置为1,也会转储帐户名称和信息。
windows视窗eraserWindows tool which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.Windows工具,允许您通过精心选择的模式多次覆盖硬盘驱动器中的敏感数据。
windows视窗etherchangeCan change the Ethernet address of the network adapters in Windows.可以在Windows中更改网络适配器的以太网地址。
windows视窗etherfloodFloods a switched network with Ethernet frames with random hardware addresses.使用随机硬件地址对具有以太网帧的交换网络进行泛洪。
windows视窗filefuzzA binary file fuzzer for Windows with several options.Windows的二进制文件模糊器,有多个选项。
windows视窗fportIdentify unknown open ports and their associated applications.识别未知的开放端口及其相关应用程序。
windows视窗fuzztalkAn XML driven fuzz testing framework that emphasizes easy extensibility and reusability.一种XML驱动的模糊测试框架,强调易于扩展性和可重用性。
windows视窗gplistLists information about the applied Group Policies.列出有关应用的组策略的信息。
windows视窗grabitallPerforms traffic redirection by sending spoofed ARP replies.通过发送欺骗性ARP回复执行流量重定向。
windows视窗gsdGives you the Discretionary Access Control List of any Windows NT service you specify as a command line option.为您指定的任何Windows NT服务的自由访问控制列表提供命令行选项。
windows视窗gtalk-decodeGoogle Talk decoder tool that demonstrates recovering passwords from accounts.Google Talk解码器工具,用于演示从帐户恢复密码。
windows视窗handleAn small application designed to analyze your system searching for global objects related to running proccess and display information for every found object, like tokens, semaphores, ports, files,..一个小应用程序,旨在分析您的系统搜索与运行proccess相关的全局对象,并显示每个找到的对象的信息,如标记,信号量,端口,文件,..
windows视窗hollows-hunterScans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).扫描所有正在运行的进程。识别并转储各种潜在的恶意植入物(替换/注入的PE,shellcode,钩子,内存中的补丁)。
windows视窗hookanalyserA hook tool which can be potentially helpful in reversing applications and analyzing malware. It can hook to an API in a process and search for a pattern in memory or dump the buffer.一种钩子工具,可能有助于逆转应用程序和分析恶意软件。它可以挂钩进程中的API并在内存中搜索模式或转储缓冲区。
windows视窗httpbogA slow HTTP denial-of-service tool that works similarly to other attacks, but rather than leveraging request headers or POST data Bog consumes sockets by slowly reading responses.一种缓慢的HTTP拒绝服务工具,与其他攻击类似,但不是利用请求头或POST数据,而是通过慢慢读取响应来消耗套接字。
windows视窗httpreconTool for web server fingerprinting, also known as http fingerprinting.用于Web服务器指纹识别的工具,也称为http指纹识别。
windows视窗httprint-win32A web server fingerprinting tool (Windows binaries).Web服务器指纹识别工具(Windows二进制文件)。
windows视窗hyperion-crypterA runtime encrypter for 32-bit portable executables.用于32位可移植可执行文件的运行时加密程序。
windows视窗ikeprobeDetermine vulnerabilities in the PSK implementation of the VPN server.确定VPN服务器的PSK实现中的漏洞。
windows视窗intercepter-ngA next generation sniffer including a lot of features: capturing passwords/hashes, sniffing chat messages, performing man-in-the-middle attacks, etc.下一代嗅探器,包括许多功能:捕获密码/哈希,嗅探聊天消息,执行中间人攻击等。
windows视窗inziderThis is a tool that lists processes in your Windows system and the ports each one listen on.这是一个列出Windows系统中的进程和每个侦听端口的工具。
windows视窗juicy-potatoA sugared version of RottenPotatoNG, with a bit of juice.RottenPotatoNG的加糖版本,有点果汁。
windows视窗justdecompileThe decompilation engine of JustDecompile.JustDecompile的反编译引擎。
windows视窗kekeoA little toolbox to play with Microsoft Kerberos in C.一个可以在C中使用Microsoft Kerberos的小工具箱
windows视窗kerbcrackKerberos sniffer and cracker for Windows.用于Windows的Kerberos嗅探器和饼干。
windows视窗kloggerA keystroke logger for the NT-series of Windows.NT系列Windows的击键记录器。
windows视窗lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts).靠土地二进制和脚本生活 - (LOLBins和LOLScripts)。
windows视窗malwareanalyserA freeware tool to perform static and dynamic analysis on malware.一种免费软件工具,可对恶意软件执行静态和动态分析。
windows视窗mbenumQueries the master browser for whatever information it has registered.查询主浏览器以获取其已注册的任何信息。
windows视窗memimagerPerforms a memory dump using NtSystemDebugControl.使用NtSystemDebugControl执行内存转储。
windows视窗mimikatzA little tool to play with Windows security.一个与Windows安全性一起使用的小工具。
windows视窗mingsweeperA network reconnaissance tool designed to facilitate large address space,high speed node discovery and identification.一种网络侦察工具,旨在促进大地址空间,高速节点发现和识别。
windows视窗msvpwnBypass Windows' authentication via binary patching.通过二进制修补绕过Windows身份验证。
windows视窗nbnameDecodes and displays all NetBIOS name packets it receives on UDP port 137 and more!解码并显示它在UDP端口137上接收的所有NetBIOS名称数据包等等!
windows视窗nbtenumA utility for Windows that can be used to enumerate NetBIOS information from one host or a range of hosts.Windows实用程序,可用于枚举来自一个主机或一系列主机的NetBIOS信息。
windows视窗netbusNetBus remote adminsitration toolNetBus远程管理工具
windows视窗netripperSmart traffic sniffing for penetration testers.智能交通嗅探渗透测试人员。
windows视窗netstumblerWell-known wireless AP scanner and sniffer.着名的无线AP扫描仪和嗅探器。
windows视窗nirsoftUnique collection of small and useful freeware utilities.独特的小型和有用的免费软件实用程序集合。
windows视窗nishangUsing PowerShell for Penetration Testing.使用PowerShell进行渗透测试。
windows视窗ntds-decodeThis application dumps LM and NTLM hashes from active accounts stored in an Active Directory database.此应用程序从存储在Active Directory数据库中的活动帐户转储LM和NTLM哈希。
windows视窗orakelcrackertThis tool can crack passwords which are encrypted using Oracle's latest SHA1 based password protection algorithm.此工具可以破解使用Oracle最新的基于SHA1的密码保护算法加密的密码。
windows视窗pafishA demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.一种演示工具,采用多种技术以与恶意软件系列相同的方式检测沙箱和分析环境。
windows视窗pe-sieveScans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).扫描给定的过程。识别并转储各种潜在的恶意植入物(替换/注入的PE,shellcode,钩子,内存中的补丁)。
windows视窗periscopeA PE file inspection tool.PE文件检查工具。
windows视窗petoolsPortable executable (PE) manipulation toolkit.便携式可执行(PE)操作工具包。
windows视窗pextractorA forensics tool that can extract all files from an executable file created by a joiner or similar.一种取证工具,可以从由连接器或类似工具创建的可执行文件中提取所有文件。
windows视窗php-vulnerability-hunterAn whitebox fuzz testing tool capable of detected several classes of vulnerabilities in PHP web applications.一个whitebox模糊测试工具,能够检测PHP Web应用程序中的几类漏洞。
windows视窗pingcastleActive Directory scanning tool.Active Directory扫描工具。
windows视窗pmapPassively discover, scan, and fingerprint link-local peers by the background noise they generate (i.e. their broadcast and multicast traffic).通过它们生成的背景噪声(即它们的广播和多播流量)被动地发现,扫描和指纹链路本地对等体。
windows视窗pmdumpA tool that lets you dump the memory contents of a process to a file without stopping the process.一种工具,允许您将进程的内存内容转储到文件而不会停止进程。
windows视窗powercloudDeliver powershell payloads via DNS TXT via CloudFlare using PowerShell.使用PowerShell通过CloudFlare通过DNS TXT提供powershell有效负载。
windows视窗powerlessshellRun PowerShell command without invoking powershell.exe.在不调用powershell.exe的情况下运行PowerShell命令。
windows视窗poweropsPowerShell Runspace Portable Post Exploitation Tool aimed at making Penetration Testing with PowerShell "easier".PowerShell Runspace便携式后期利用工具旨在使PowerShell的“渗透测试更容易”。
windows视窗ppeeA Professional PE file Explorer for reversers, malware researchers and those who want to statically inspect PE files in more details.用于反向器的专业PE文件浏览器,恶意软件研究人员以及希望更详细地静态检查PE文件的人员。
windows视窗promiscdetectChecks if your network adapter(s) is running in promiscuous mode, which may be a sign that you have a sniffer running on your computer.检查您的网络适配器是否以混杂模式运行,这可能表示您的计算机上正在运行嗅探器。
windows视窗pstoreviewLists the contents of the Protected Storage.列出受保护存储的内容。
windows视窗pwdumpExtracts the binary SAM and SYSTEM file from the filesystem and then the hashes.从文件系统中提取二进制SAM和SYSTEM文件,然后从哈希中提取。
windows视窗python-minidumpPython library to parse and read Microsoft minidump file format.Python库解析和读取Microsoft minidump文件格式。
windows视窗python-minikerberosKerberos manipulation library in pure Python.纯Python中的Kerberos操作库。
windows视窗python2-minidumpPython library to parse and read Microsoft minidump file format.Python库解析和读取Microsoft minidump文件格式。
windows视窗python2-minikerberosKerberos manipulation library in pure Python.纯Python中的Kerberos操作库。
windows视窗radiographyA forensic tool which grabs as much information as possible from a Windows system.一种取证工具,可从Windows系统中获取尽可能多的信息。
windows视窗rasenumA small program which lists the information for all of the entries in any phonebook file (.pbk).一个小程序,列出任何电话簿文件(.pbk)中所有条目的信息。
windows视窗regreportWindows registry forensic analysis tool.Windows注册表取证分析工具。
windows视窗regviewOpen raw Windows NT 5 Registry files (Windows 2000 or higher).打开原始Windows NT 5注册表文件(Windows 2000或更高版本)。
windows视窗resourcehackerResource compiler and decompiler for Windows® applications.Windows®应用程序的资源编译器和反编译器。
windows视窗rpakA collection of tools that can be useful for doing attacks on routing protocols.一组工具,可用于对路由协议进行攻击。
windows视窗rpcsnifferSniffs WINDOWS RPC messages in a given RPC server process.在给定的RPC服务器进程中嗅探WINDOWS RPC消息。
windows视窗rpctoolsContains three separate tools for obtaining information from a system that is running RPC services包含三个单独的工具,用于从运行RPC服务的系统获取信息
windows视窗setownerAllows you to set file ownership to any account, as long as you have the "Restore files and directories" user right.允许您将文件所有权设置为任何帐户,只要您具有“还原文件和目录”用户权限即可。
windows视窗shed.NET runtime inspector..NET运行时检查器。
windows视窗sigspotterA tool that search in your HD to find wich publishers has been signed binaries in your PC.在您的高清搜索中找到有关发布者的工具已经在您的PC中签署了二进制文件。
windows视窗sipscanA sip scanner.一个sip扫描仪。
windows视窗skype-dumpThis is a tool that demonstrates dumping MD5 password hashes from the configuration file in Skype.这是一个演示从Skype配置文件中转储MD5密码哈希值的工具。
windows视窗smbrelaySMB / HTTP to SMB replay attack toolkit.SMB / HTTP到SMB重放攻击工具包。
windows视窗snitchTurn back the asterisks in password fields to plaintext passwords.将密码字段中的星号转回明文密码。
windows视窗snowmanA native code to C/C++ decompiler, see the examples of generated code.C / C ++反编译器的本机代码,请参阅生成代码的示例。
windows视窗snscanA Windows based SNMP detection utility that can quickly and accurately identify SNMP enabled devices on a network.基于Windows的SNMP检测实用程序,可以快速准确地识别网络上启用SNMP的设备。
windows视窗spadeA general-purpose Internet utility package, with some extra features to help in tracing the source of spam and other forms of Internet harassment.通用Internet实用程序包,具有一些额外功能,可帮助跟踪垃圾邮件源和其他形式的Internet骚扰。
windows视窗sqldictA dictionary attack tool for SQL Server.SQL Server的字典攻击工具。
windows视窗sqlpingSQL Server scanning tool that also checks for weak passwords using wordlists.SQL Server扫描工具,还使用单词列表检查弱密码。
windows视窗sqlpowerinjectorApplication created in .Net 1.1 that helps the penetration tester to find and exploit SQL injections on a web page.在.Net 1.1中创建的应用程序,可帮助渗透测试人员在网页上查找和利用SQL注入。
windows视窗streamfinderSearches for Alternate Data Streams (ADS).搜索备用数据流(ADS)。
windows视窗sub7A remote administration tool. No further comments ;-)远程管理工具。没有进一步的评论;-)
windows视窗superscanPowerful TCP port scanner, pinger, resolver.强大的TCP端口扫描器,pinger,旋转变压器。
windows视窗sysinternals-suiteSysinternals tools suite.Sysinternals工具套件。
windows视窗uacmeDefeating Windows User Account Control.击败Windows用户帐户控制。
windows视窗unsecureBruteforces network login masks.Bruteforces网络登录掩码。
windows视窗upnp-pentest-toolkitUPnP Pentest Toolkit for Windows.适用于Windows的UPnP Pentest Toolkit。
windows视窗wceA security tool to list logon sessions and add, change, list and delete associated credentials (ex.: LM/NT hashes, plaintext passwords and Kerberos tickets).一种安全工具,用于列出登录会话以及添加,更改,列出和删除相关凭据(例如:LM / NT哈希,明文密码和Kerberos票证)。
windows视窗wifichannelmonitorA utility for Windows that captures wifi traffic on the channel you choose, using Microsoft Network Monitor capture driver.Windows实用程序,使用Microsoft网络监视器捕获驱动程序捕获您选择的通道上的wifi流量。
windows视窗windivertA user-mode packet capture-and-divert package for Windows.用于Windows的用户模式数据包捕获和转移程序包。
windows视窗windows-privesc-checkStandalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems.独立可执行文件,用于检查Windows系统上的简单权限提升向量。
windows视窗windowsspyblockerBlock spying and tracking on Windows.阻止Windows上的间谍和跟踪。
windows视窗winfoUses null sessions to remotely try to retrieve lists of and information about user accounts, workstation/interdomain/server trust accounts, shares (also hidden), sessions, logged in users, and password/lockout policy, from Windows NT/2000/XP.使用空会话远程尝试从Windows NT / 2000 / XP检索用户帐户,工作站/域间/服务器信任帐户,共享(也隐藏),会话,登录用户和密码/锁定策略的列表和信息。
windows视窗winhexHex Editor and Disk Editor.Hex Editor和Disk Editor。
windows视窗winrelayA TCP/UDP forwarder/redirector that works with both IPv4 and IPv6.适用于IPv4和IPv6的TCP / UDP转发器/重定向器。
windows视窗wpsweepA simple ping sweeper, that is, it pings a range of IP addresses and lists the ones that reply.一个简单的ping扫描程序,即它ping一系列IP地址并列出回复的地址。
windows视窗wupsAn UDP port scanner for Windows.适用于Windows的UDP端口扫描程序。
windows视窗x-scanA general network vulnerabilities scanner for scanning network vulnerabilities for specific IP address scope or stand-alone computer by multi-threading method, plug-ins are supportable.一般的网络漏洞扫描程序,用于通过多线程方法扫描特定IP地址范围或独立计算机的网络漏洞,插件是可支持的。
windows视窗x64dbgAn open-source x64/x32 debugger for windows.一个用于Windows的开源x64 / x32调试器。
wireless无线aircrack-ngKey cracker for the 802.11 WEP and WPA-PSK protocols802.11 WEP和WPA-PSK协议的关键破解者
wireless无线airfloodA modification of aireplay that allows for a DoS of the AP. This program fills the table of clients of the AP with random MACs doing impossible new connections. [Tool in Spanish]允许AP的DoS的aireplay的修改。该程序用随机MAC填充AP的客户端表,从而进行不可能的新连接。[西班牙语工具]
wireless无线airgeddonMulti-use bash script for Linux systems to audit wireless networks.用于Linux系统的多用途bash脚本,用于审核无线网络。
wireless无线airoscriptA script to simplify the use of aircrack-ng tools.一个简化aircrack-ng工具使用的脚本。
wireless无线airpwnA tool for generic packet injection on an 802.11 network.用于在802.11网络上进行通用数据包注入的工具。
wireless无线aphopperA program that automatically hops between access points of different wireless networks.在不同无线网络的接入点之间自动跳跃的程序。
wireless无线apnbfA small python script designed for enumerating valid APNs (Access Point Name) on a GTP-C speaking device.一个小的python脚本,用于枚举GTP-C语音设备上的有效APN(接入点名称)。
wireless无线atearWireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration.无线黑客,WiFi安全,漏洞分析器,Pentestration。
wireless无线batctlB.A.T.M.A.N. advanced control and management toolBATMAN先进的控制和管理工具
wireless无线batman-advBatman kernel module, (included upstream since .38)蝙蝠侠内核模块,(包括上游自.38)
wireless无线batman-alfredAlmighty Lightweight Fact Remote Exchange Daemon全能轻量级事实远程交换守护进程
wireless无线beholderA wireless intrusion detection tool that looks for anomalies in a wifi environment.一种无线入侵检测工具,可在wifi环境中查找异常情况。
wireless无线boopsuiteA Suite of Tools written in Python for wireless auditing and security testing.用Python编写的一套工具,用于无线审计和安全测试。
wireless无线bullyRetrieve WPA/WPA2 passphrase from a WPS enabled access point从启用WPS的访问点检索WPA / WPA2密码
wireless无线cowpattyWireless WPA/WPA2 PSK handshake cracking utility无线WPA / WPA2 PSK握手破解实用程序
wireless无线create_apA shell script to create a NATed/Bridged Software Access Point用于创建NATed /桥接软件访问点的shell脚本
wireless无线eapeakAnalysis Suite For EAP Enabled Wireless Networks.适用于EAP的无线网络分析套件。
wireless无线eaphammerTargeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.针对WPA2-Enterprise网络的有针对性的邪恶双重攻击。使用敌对门户攻击的间接无线枢纽。
wireless无线freeradiusThe premier open source RADIUS server首要的开源RADIUS服务器
wireless无线freewifiHow to get free wifi.如何获得免费的无线网络。
wireless无线fuzzapA python script for obfuscating wireless networks.用于混淆无线网络的python脚本。
wireless无线g72x++Decoder for the g72x++ codec.g72x ++编解码器的解码器。
wireless无线gerix-wifi-crackerA graphical user interface for aircrack-ng and pyrit.用于aircrack-ng和pyrit的图形用户界面。
wireless无线giskismetA program to visually represent the Kismet data in a flexible manner.一种以灵活的方式直观地表示Kismet数据的程序。
wireless无线gnuradioGeneral purpose DSP and SDR toolkit. With drivers for usrp and fcd.通用DSP和SDR工具包。带有usrp和fcd的驱动程序。
wireless无线gqrxInteractive SDR receiver waterfall for many devices.交互式SDR接收器瀑布适用于许多设备。
wireless无线hcxdumptoolSmall tool to capture packets from wlan devices从wlan设备捕获数据包的小工具
wireless无线hcxtoolsPortable solution for capturing wlan traffic and conversion to hashcat and John the Ripper formats便携式解决方案,用于捕获wlan流量并转换为hashcat和John the Ripper格式
wireless无线hooverWireless Probe Requests Sniffer.无线探针请求嗅探器。
wireless无线hostapd-wpeIEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator - Wireless Pwnage Edition.IEEE 802.11 AP,IEEE 802.1X / WPA / WPA2 / EAP / RADIUS认证器 - 无线Pwnage版。
wireless无线hotspotterHotspotter passively monitors the network for probe request frames to identify the preferred networks of Windows XP clients, and will compare it to a supplied list of common hotspot network names.Hotspotter被动地监视网络以查找探测请求帧以识别Windows XP客户端的首选网络,并将其与提供的公共热点网络名称列表进行比较。
wireless无线jcrackA utility to create dictionary files that will crack the default passwords of select wireless gateways用于创建将破解选定无线网关的默认密码的字典文件的实用程序
wireless无线kismet802.11 layer2 wireless network detector, sniffer, and intrusion detection system802.11 layer2无线网络探测器,嗅探器和入侵检测系统
wireless无线kismet-earthVarious scripts to convert kismet logs to kml file to be used in Google Earth.用于将kismet日志转换为要在Google Earth中使用的kml文件的各种脚本。
wireless无线kismet2earthA set of utilities that convert from Kismet logs to Google Earth .kml format一组从Kismet日志转换为Google Earth .kml格式的实用程序
wireless无线kismonGUI client for kismet (wireless scanner/sniffer/monitor).用于kismet的GUI客户端(无线扫描仪/嗅探器/监视器)。
wireless无线lorconGeneric library for injecting 802.11 frames用于注入802.11帧的通用库
wireless无线manaA toolkit for rogue access point (evilAP) attacks first presented at Defcon 22.针对恶意接入点(evilAP)攻击的工具包首先在Defcon 22上展示。
wireless无线mdk3WLAN penetration toolWLAN渗透工具
wireless无线mdk4Proof-of-Concept tool to exploit common IEEE 802.11 protocol weaknesses.概念验证工具,用于利用常见的IEEE 802.11协议弱点。
wireless无线mfcukMIFARE Classic Universal toolKitMIFARE Classic Universal toolKit
wireless无线mitmapA python program to create a fake AP and sniff data.一个python程序,用于创建虚假AP和嗅探数据。
wireless无线mousejackWireless mouse/keyboard attack with replay/transmit poc.无线鼠标/键盘攻击与重播/传输poc。
wireless无线mtscanMikrotik RouterOS wireless scanner.Mikrotik RouterOS无线扫描仪。
wireless无线netattackPython script to scan and attack wireless networks.用于扫描和攻击无线网络的Python脚本。
wireless无线pidenseMonitor illegal wireless network activities. (Fake Access Points)监控非法的无线网络活动。(假接入点)
wireless无线pixiewpsOffline bruteforce of the WPS pin exploiting the low or non-existing entropy of some APsWPS引脚的离线暴力攻击利用某些AP的低或不存在的熵
wireless无线python-trackerjackerFinds and tracks wifi devices through raw 802.11 monitoring.通过原始802.11监控查找和跟踪wifi设备。
wireless无线reaverBrute force attack against Wifi Protected Setup对Wifi Protected Setup的暴力攻击
wireless无线rfdumpTool to detect RFID-Tags and show their meta information用于检测RFID标签并显示其元信息的工具
wireless无线rfidiotAn open source python library for exploring RFID devices.用于探索RFID设备的开源python库。
wireless无线rfidtoolA opensource tool to read / write rfid tags一个用于读/写rfid标签的开源工具
wireless无线sniff-probe-reqWi-Fi Probe Requests Sniffer.Wi-Fi探测器请求嗅探器。
wireless无线spectoolsSpectrum-Tools is a set of utilities for using the Wi-Spy USB spectrum analyzer hardware. Stable version.Spectrum-Tools是一组使用Wi-Spy USB频谱分析仪硬件的实用程序。稳定的版本。
wireless无线timegenThis program generates a *.wav file to "send" an own time signal to DCF77 compatible devices.该程序生成* .wav文件,以便将自己的时间信号“发送”到DCF77兼容设备。
wireless无线ubitackTool, which automates some of the tasks you might need on a (wireless) penetration test or while you are on the go.工具,可以自动执行(无线)穿透测试或您在旅途中可能需要的一些任务。
wireless无线waidpsWireless Auditing, Intrusion Detection & Prevention System.无线审计,入侵检测和预防系统。
wireless无线wavemonNcurses-based monitoring application for wireless network devices基于Ncurses的无线网络设备监控应用程序
wireless无线wepbusterscript for automating aircrack-ng用于自动化aircrack-ng的脚本
wireless无线wi-feyeAn automated wireless penetration testing tool written in python, its designed to simplify common attacks that can be performed on wifi networks so that they can be executed quickly and easily.一种用python编写的自动无线穿透测试工具,旨在简化可在wifi网络上执行的常见攻击,以便快速,轻松地执行。
wireless无线wifi-pumpkinFramework for Rogue Wi-Fi Access Point Attack.恶意Wi-Fi接入点攻击框架。
wireless无线wificurseWiFi jamming tool.WiFi干扰工具。
wireless无线wifijammerA python script to continuosly jam all wifi clients within range.一个python脚本,可以持续阻塞范围内的所有wifi客户端。
wireless无线wifiphisherFast automated phishing attacks against WPA networks.针对WPA网络的快速自动网络钓鱼攻击。
wireless无线wifiscanmapAnother wifi mapping tool.另一个wifi映射工具。
wireless无线wifitapWiFi injection tool through tun/tap device.WiFi注入工具通过tun / tap设备。
wireless无线wifiteTool to attack multiple WEP and WPA encrypted networks at the same time同时攻击多个WEP和WPA加密网络的工具
wireless无线wireless-idsAbility to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.能够通过嗅探无线数据包的空气来检测(WEP / WPA / WPS)攻击等可疑活动。
wireless无线wirouter-keyrecA platform independent software to recover the default WPA passphrases of the supported router models一种独立于平台的软件,用于恢复支持的路由器型号的默认WPA密码
wireless无线wlan2ethRe-writes 802.11 captures into standard Ethernet frames.将802.11捕获重写为标准以太网帧。
wireless无线wpa-bruteforcerAttacking WPA/WPA encrypted access point without client.在没有客户端的情况下攻击WPA / WPA加密接入点。
wireless无线wpa2-halfhandshake-crackA POC to show it is possible to capture enough of a handshake with a user from a fake AP to crack a WPA2 network without knowing the passphrase of the actual AP.显示它的POC可以捕获与来自假AP的用户的足够握手以破解WPA2网络而不知道实际AP的密码短语。
wireless无线wpsikWPS scan and pwn tool.WPS扫描和pwn工具。
wireless无线zizzaniaAutomated DeAuth attack.自动DeAuth攻击。
wireless无线zykeysDemonstrates how default wireless settings are derived on some models of ZyXEL routers.演示如何在某些型号的ZyXEL路由器上派生默认无线设置。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值