AeonDave/malskill - 第 7 页

ropgadget

Auth/lab ref: gadget discovery utility for ELF, PE, Mach-O, and raw binaries.

原文语言：英语

seccomp-tools

Auth/lab ref: seccomp BPF inspection toolkit for dumping, disassembling, assembling, and emulating Linux syscall filters.

原文语言：英语

strace

Auth/lab ref: Linux syscall tracer for observing file, process, network, memory, and signal behavior at runtime.

原文语言：英语

strings

Auth/lab ref: printable-string extractor for binaries, libraries, firmware blobs, and files of unknown type.

原文语言：英语

upx

Auth/lab ref: executable packer and unpacker for PE, ELF, Mach-O, and several embedded formats.

原文语言：英语

windbg

Auth/lab ref: Microsoft's debugger for user-mode and kernel-mode Windows debugging, crash dump analysis, driver reversing, and rootkit analysis.

原文语言：英语

x64dbg

Auth/lab ref: User-mode debugger for Windows x64/x86 with plugin ecosystem for malware analysis, unpacking, API tracing, and anti-anti-debug.

原文语言：英语

reverse-ssh

Auth/lab ref: Establish reverse SSH tunnels from victim to attacker for interactive shell access behind NAT/firewall.

原文语言：英语

revshellgen

Auth/lab ref: Interactive Python reverse-shell generator with auto listener setup, encoding support, and shell-type selection.

原文语言：英语

revshells

Auth/lab ref: callback-shell lab one-liner generator (web UI and CLI) supporting 50+ shells.

原文语言：英语

shellerator

Auth/lab ref: CLI reverse/bind-shell lab generator supporting 20+ languages with optional encoding.

原文语言：英语

weevely3

Auth/lab ref: Weevely3 PHP web-shell artifact analysis; file ops, module inventory, pivot-risk review, containment and cleanup notes.

原文语言：英语

burpsuite

Auth/lab ref: Burp Suite: integrated web application security testing platform with proxy, scanner, intruder, and repeater.

原文语言：英语

dalfox

Auth/lab ref: fast Go-based XSS scanner for parameter analysis and DOM-based XSS detection.

原文语言：英语

gitleaks

Auth/lab ref: Gitleaks secret scanning; repo/directory/stdin checks, regex+entropy rules, pre-commit/CI evidence, remediation workflow.

原文语言：英语

grype

Auth/lab ref: fast vulnerability scanner for container images, filesystems, SBOMs, and directories.

原文语言：英语

mythril

Auth/lab ref: symbolic-execution-based security analyzer for Solidity and EVM bytecode.

原文语言：英语

nikto

Auth/lab ref: open-source web server scanner checking for 6700+ known vulnerabilities, outdated software, misconfigurations, and dangerous CGI/default files.

原文语言：英语

nosqlmap

Auth/lab ref: automated NoSQL injection detection and exploitation tool targeting MongoDB, CouchDB, and other NoSQL databases.

原文语言：英语

nuclei

Auth/lab ref: Template-based vulnerability and exposure scanner from ProjectDiscovery.

原文语言：英语

openvas

Auth/lab ref: OpenVAS / Greenbone Community Edition: broad network vulnerability scanner checking 90,000+ NVTs across hosts, services, and web apps.

原文语言：英语

osv-scanner

Auth/lab ref: Google's dependency vulnerability scanner using the OSV.dev database (30+ ecosystem sources).

原文语言：英语

semgrep

Auth/lab ref: fast static analysis tool for finding security vulnerabilities, misconfigurations, and secrets in source code.

原文语言：英语

slither

Auth/lab ref: smart contract static analyzer for Solidity and Vyper with detectors, printers, and custom analysis APIs.

原文语言：英语

sqlmap

Auth/lab ref: automated SQL injection detection and exploitation tool. For testing web applications for SQLi vulnerabilities to enumerate databases, extract data, read/write files, or escalate to OS shell.

原文语言：英语

ssrfmap

Auth/lab ref: automated SSRF (Server-Side Request Forgery) exploitation tool using Burp-style request files.

原文语言：英语

sstimap

Auth/lab ref: actively maintained SSTI detection and exploitation tool with interactive and predetermined modes across Jinja2, Twig, Smarty, Freemarker, Velocity, ERB, Pug, Nunjucks, and more.

原文语言：英语

testssl

Auth/lab ref: testssl.sh: broad TLS/SSL testing script checking protocol support, cipher suites, vulnerabilities (BEAST, POODLE, Heartbleed, ROBOT, DROWN, etc.), and certificate issues.

原文语言：英语

trivy

Auth/lab ref: broad vulnerability scanner for containers, filesystems, repos, IaC, and SBOMs.

原文语言：英语

trufflehog

Auth/lab ref: TruffleHog secret scanning; verified secret types, git/cloud/CI sources, validation evidence, remediation workflow.

原文语言：英语

wpscan

Auth/lab ref: WordPress vulnerability and enumeration scanner.

原文语言：无法判定

commix

Auth/lab ref: automated OS command injection detection and exploitation tool. For testing web parameters, cookies, or headers for command injection vulnerabilities and escalating to an interactive OS shell.

原文语言：英语

corsy

Auth/lab ref: Corsy CORS policy scanner; origin reflection, null origin, wildcard, regex/prefix edge cases, API evidence.

原文语言：英语

jwt-tool

Auth/lab ref: broad JWT testing and exploitation toolkit.

原文语言：英语

liffy

Auth/lab ref: Liffy LFI/path traversal validation; wrappers, /proc, log artifacts, file-read evidence, WAF-aware replay notes.

原文语言：英语

smuggler

Auth/lab ref: HTTP/1.1 request smuggling and desync detection tool testing CL.TE, TE.CL, and TE.TE variants.

原文语言：英语

xsstrike

Auth/lab ref: XSStrike XSS validation; context analysis, DOM checks, crawler, blind callback workflow, WAF-aware evidence.

原文语言：英语

zap

Auth/lab ref: OWASP ZAP: free open-source web application scanner and intercepting proxy.

原文语言：英语

bloodhound

Auth/lab ref: Active Directory testing path visualization using graph theory.

原文语言：英语

coercer

Auth/lab ref: Coercer forces Windows servers to authenticate to a controlled host by abusing MS-RPRN, MS-EFSR, MS-DFSNM, and other RPC protocols, enabling NTLM relay or hash capture.

原文语言：英语