💬 🚀 告别繁琐命令行，用自然语言驱动专业级渗透测试。 ⚡ 让安全测试从未如此简单、高效。Forget complex command lines. 🛡️ Professional penetration testing, powered by natural language.
☆127Mar 6, 2026Updated 2 months ago
Alternatives and similar repositories for pentest-skills
Users that are interested in pentest-skills are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 基于 Chrome Manifest V3 的渗透测试辅助插件，用于快速发现页面输入点、评估 CSP 风险、嗅探潜在敏感资产、识别常见前端框架指纹，并内置常用编码转换工具，帮助进行合法合规的渗透测试与安全检查☆66Mar 2, 2026Updated 2 months ago
- 收集整理渗透测试、漏洞扫描、代码审计、CTF、逆向、安全研究 等网络安全相关的 Skills和MCP☆295Apr 21, 2026Updated 3 weeks ago
- 二开魔改冰蝎(ByPassBehinder)4.1☆24Oct 11, 2025Updated 7 months ago
- ☆65Oct 24, 2025Updated 6 months ago
- 基于 PyQt5 的 Nuclei 漏洞扫描图形化工具，支持 POC 管理、FOFA/Hunter/Shodan 资产搜索、AI 辅助分析、漏洞报告生成等功能☆54May 4, 2026Updated 2 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 用友NC漏洞批量检测工具，支持POC显示、单一检测、批量检测、结果导出、AI交互等☆46Sep 8, 2025Updated 8 months ago
- 内存分析中玩贪吃蛇☆16Jan 13, 2024Updated 2 years ago
- 东方隐侠团队出品，代码审计skill☆108Feb 25, 2026Updated 2 months ago
- SwordfishSuite - Web安全测试利器 一款轻量、高速、插件化的现代Web安全测试工具，专为安全研究员和渗透测试者打造。 ✨ 核心特性： 智能代理：无缝拦截与修改HTTP/S请求，流畅度超越BurpSuite。 高度集成：集成云端虚拟手机，快速定位AP…☆57Apr 10, 2026Updated last month
- redis图形化漏洞利用工具☆30Mar 24, 2026Updated last month
- This is a IDA plugin that integrates several modules of miasm☆23Nov 3, 2020Updated 5 years ago
- Phishing sender是一款针对钓鱼邮件应急演练所编写的小脚本，实际上是封装了swaks，让人们做演练的时候更加方便快捷。☆16Jun 8, 2022Updated 3 years ago
- tomcat的servlet、filter、listener内存马查杀工具☆38Sep 20, 2023Updated 2 years ago
- 基于Django 的漏洞管理预警系统☆32Feb 13, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- hessian反序列化利用工具☆40Apr 11, 2026Updated last month
- 各类综合 upload_fuzz,smb_fuzz,tls绕过,被动指纹扫描☆70Jun 6, 2025Updated 11 months ago
- 搜集平时学习工作中常用的frida脚本☆44Feb 7, 2025Updated last year
- Struts2全版本漏洞检测工具18.09☆20May 15, 2021Updated 5 years ago
- ☆42Nov 15, 2025Updated 6 months ago
- FastjsonScan4Burp 一款基于burp被动扫描的fastjson漏洞探测插件，可针对数据包中存在json的参数或请求体进行payload测试。旨在帮助安全人员更加便捷的发现、探测、深入利用fastjson漏洞，目前已实现fastjson探测、版本、依赖探测、出…☆165Mar 13, 2025Updated last year
- log4j2内网扫描☆55Mar 16, 2022Updated 4 years ago
- 方便自己搭建codeql环境和数据库的工具。☆64Mar 25, 2026Updated last month
- Fenrir 是一个基于 MCP 协议与 AST 技术的代码审计工具，旨在解决安全研究与自动化代码审计领域中，面对大规模、结构复杂甚至反编译代码时，传统代码搜索与分析手段效率低、准确性差的问题。☆178Oct 21, 2025Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- JavaAgent内存马实现、检测、修复demo☆11Dec 7, 2022Updated 3 years ago
- ☆60May 22, 2023Updated 2 years ago
- BpArsenal, a Burp Suite plugin that can quickly convert http requests into command-line tool execution, launch third-party tools and open…☆22Oct 31, 2025Updated 6 months ago
- A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks☆31Mar 17, 2026Updated 2 months ago
- 少而精的常用字典，积累各种场景实现字典进化，只追求更简单更有效，不建议star，但建议pr。☆143Jun 7, 2024Updated last year
- JavaScript Deconfusion Tool. JavaScript解混淆工具，提供多种解混淆配置，支持自定义模块。☆81Mar 19, 2026Updated 2 months ago
- BCEL encode/decode manager for fastjson payloads☆152Jul 4, 2022Updated 3 years ago
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆16Jun 5, 2025Updated 11 months ago
- 递归寻找JS泄露的路径。Recursively search for the paths of JS Files.For pentest☆11Sep 30, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 毒液流量转发器：自动化捡洞/打点/跳板必备神器， 支持联动URL爬虫、各种被动扫描器。☆180Mar 3, 2025Updated last year
- Luna AI证件照 / AI高管照 / AI形象照 / AI简历照☆44Oct 15, 2024Updated last year
- ☆40Nov 25, 2024Updated last year
- Professional file upload vulnerability testing tool with 263+ bypass techniques, proxy capture, dynamic scanning（专业的文件上传漏洞检测工具，支持263+绕过技术…☆174Apr 11, 2026Updated last month
- Anti-Rootkit Tool for Windows☆13Mar 24, 2025Updated last year
- Python Script to quickly check if a host is running NetScaler Gateway and/or AAA☆12Jul 27, 2023Updated 2 years ago
- ip2regions 自用数据库☆31Jul 25, 2025Updated 9 months ago