安全工具收集

网页类

• 棱角在线工具

  一键生成命令

  https://forum.ywhack.com/bountytips.php?tools

• 云悉指纹识别平台

  https://www.yunsee.cn/

• 获取网站源IP

  https://get-site-ip.com/

• Dnsdb

  查看DNS解析记录

  https://dnsdb.io/

• Viewdns

  查看DNS历史解析记录

  https://viewdns.info

• Fake-flash.cn

  flash钓鱼页

  https://github.com/r00tSe7en/Fake-flash.cn

工具类

• netcat

  可反弹shell

  https://eternallybored.org/misc/netcat/

• BurpLoaderKeygen

  https://github.com/h3110w0r1d-y/BurpLoaderKeygen/releases/tag/1.4

• mimikatz

  https://github.com/gentilkiwi/mimikatz

• ARL

  资产侦察灯塔

  https://github.com/TophantTechnology/ARL

• JSFinder

  快速在网站的js文件中提取URL

  https://github.com/Threezh1/JSFinder

• DependencyCheck

  Maven漏洞扫描

  https://github.com/jeremylong/DependencyCheck

• dvcs-ripper

  版本控制文件泄露恢复源码

  https://github.com/kost/dvcs-ripper

• GitHack

  .git泄露利用脚本

  https://github.com/lijiejie/GitHack

• SvnHack

  .svn泄露利用脚本

  https://github.com/callmefeifei/SvnHack

• ds_store_exp

  .DS_Store文件泄漏利用脚本

  https://github.com/lijiejie/ds_store_exp

• wafw00f

  waf识别

  https://github.com/EnableSecurity/wafw00f

• FUCK CDN

  全网扫描网站源IP

  https://github.com/Tai7sy/fuckcdn

• Finger

  一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具

  https://github.com/EASY233/Finger

• Kunyu

  更高效的企业资产收集

  https://github.com/knownsec/Kunyu

• Shuize

  信息收集自动化工具

  https://github.com/0x727/ShuiZe_0x727

• OneForAll

  一款功能强大的子域收集工具

  https://github.com/shmilylty/OneForAll

• CaptfEncoder

  网络安全相关编码转换、古典密码、密码学、公钥加密、聚合查询、杂项等多种实用工具

  https://github.com/guyoung/CaptfEncoder

• CSRFTester

  https://wiki.owasp.org/index.php/File:CSRFTester-1.0.zip

• ysoserial

  java反序列化工具

  https://github.com/frohoff/ysoserial

• SerializationDumper

  读取java反序列化后信息

  https://github.com/NickstaDB/SerializationDumper

• Bandit

  python源码审计

  https://bandit.readthedocs.io/