» Unlabelled » Python Vulnerability and penetration practice platform

Python Vulnerability and penetration practice platform

04:11


Python Vulnerability and penetration practice platform




WebGoat vulnerability practice platform

Webgoat-legacy vulnerability practice platform
Zvuldirll vulnerability practice platform
Vulapps vulnerability practice platform
Dvwa vulnerability practice platform
Database injection practice platform
Vulnerability practice platform written in node, like OWASP Node Goat
A tool written by Ruby to generate virtual machines with vulnerabilities

Fancy scanner

Nmap port scanner
Local network scanner
Subdomain Scanner
Linux vulnerability scan
Port-based scanning and associated CVE
Vulnerability Route Scanner
Mini batch information leak scanning script
Waf type detection tool
Server port weak password scanner
Fox-scan scanner

Information gathering tools

Social worker collector
Github information collection
Github Repo information gathering tool
Information detection and scanning tools
Internal network information scanner
Remote Desktop Login Scanner
Network infrastructure penetration tool
SNMAP password cracking

WEB

Webshell big collection
Penetration and web attack scripts
Web penetration gadgets collection
XSS data receiving platform
XSS and CSRF tools
Xss multifunction scanner
Web vulnerability scanner
WEB vulnerability scanner
Infiltrate common gadget kits
Web directory scanner
Web injection command detection tool
Automated SQL injection checker
Security tool collection
Apache log analyzer
Php code audit tool
Web fingerprinting scan
Check website malicious attacks
Wordprees vulnerability scanner
Firmware Vulnerability Scanner
Database injection tool

Https://github.com/sqlmapproject/sqlmap

Web proxy
The new version of the Chinese kitchen knife
Git leaks using EXP
Browser attack framework
Automate bypassing WAF scripts
An open source WAF
Http command line client
Browser debug tool
DISCUZ Vulnerability Scanner
Automated code auditing tool
Browser attack framework
Tomcat automatic backdoor deployment
Cyberspace fingerprint scanner
Burpsuit J2EE scanning plugin

Windows domain penetration tool

Mimikatz plaintext injection
Powershell infiltration library collection
Powershell tools collectio
Powershell's mimikittenz
Domain infiltration tutorial

Fuzz

Web to Fuzz tool
HTTP brute force attack, collision library attack script

Exploit and attack framework

Msf framework
Pocsscan attack framework
Pocsuite attack framework
Beebeeto attack framework

Vulnerability POC&EXP

ExploitDB official git version
Php vulnerability code analysis
CVE-2016-2107
CVE-2015-7547 POC
JAVA deserialization POC generation tool
JAVA deserializes EXP
Jenkins CommonCollections EXP
CVE-2015-2426 EXP (Windows kernel rights)
Use docker to show web attack (php local file contains a demo with phpinfo getshell and ssrf combined with curl)
Php7 cache override vulnerability Demo and related tools
XcodeGhost Trojan sample

Middleman attack and fishing

Man-in-the-middle attack framework
Inject code, jam wifi, and spy on wifi users
Middleman agent tool
Wifi fishing

Password cracking

Password cracking tool

Various types of password extraction tools stored locally

Binary and code analysis tools

Binary analysis tool
System scanner
Rp
Windows Exploit Development tool

Binary static analysis tool python

Python Exploit Development Assistance for GDB
Monitoring tool for BillGates Linux Botnet Trojan activity
Trojan configuration parameter extraction tool
Binary analysis tool (CTF) written by Shellphish
Static code analysis tool for python
An automated scripting tool for giving warnings and suggestions
Simple Javascript anti-aliasing aid based on AST transformation

EXP writing framework and tools

Binary EXP authoring tool
CTF Pwn class topic scripting framework
An easy-to-use io library for pwning development
Cross-platform injection tool
Hash length extension attack EXP

Steganography

Steganographic detection tool

Various types of safety information

Data_hacking collection
Mobile-security-wiki
The book "reverse-engineering-for-beginners
Some information security standards and device configurations
APT related notes
Kcon information
DO NOT FUCK WITH A HACKER
Various types of safe brain holes
Information security flow chart

Various CTF resources

In recent years ctf writeup Daquan
Fbctf competition platform Demo
Ctf Resources
Ctf and hacker resource collection
A large collection of ctf and security tools
Ctf to python toolkit

Various programming resources

Spree (whatever has)
Bash-handbook
Git learning materials
Android open source code analysis
Python framework, library, resource collection
JS regular expression library (used to simplify the construction of complex JS regular expressions)

Python

The python regular expression library (used to simplify the construction of complex python regular expressions)
Python task management and command execution library
Python exe package library
Veil-Evasion exemption project
Py3 crawler framework
A python library that provides underlying interface packet programming and network protocol support
Python requests library

 Https://github.com/kennethreitz/requests

Python utility collection
Python crawler system

Science online

Science internet tool

welfare

WeChat automatic grab red envelope dynamic library
WeChat grab red envelope plugin (Android version)
Hardsed artifact

Party A Security Engineer Survival Guide

Web indexing and log search tools
Open source log collector
Scan the CS structure of the web debuger
Restore the sqlite database to delete the registration information
Gps spoofing detection tool

 Https://github.com/zxsecurity/gpsnitch
Emergency response response framework
Web Security Development Guide
Vulnerability test report templates for various well-known vendors

linux malicious code detection package
Operating system operation indicator visualization framework
Malicious code analysis system
Https://github.com/cuckoosandbox/cuckoo

Search and store web applications regularly
Event response framework
Integrated host monitoring and detection platform
Distributed real-time digital forensics system
Microsoft & Unix file system and hard drive forensics tools

honey jar

SSH honey pot
Honeypot collection resources

Https://github.com/paralax/awesome-honeypots
Kippo advanced vesion of the honey pot

Https://github.com/micheloosterhof/cowrie
SMTP honeypot
Web application honeypot
Database honeypot
Web honeypot

Remote control

Use gmail as the back door of the C&C server
Open source remote control
c# remote control

Share
Disclaimer: Gambar, artikel ataupun video yang ada di web ini terkadang berasal dari berbagai sumber media lain. Hak Cipta sepenuhnya dipegang oleh sumber tersebut. Jika ada masalah terkait hal ini, Anda dapat menghubungi kami disini.

LATEST ARTICLES

Post a Comment