找到 3817 篇与 绿色软件 相关的结果 - 第 33 页
-
精选开源工具：thc-hydra 推荐 推荐一个实用的开源工具——**thc-hydra**。项目由vanhauser-thc开发维护，GitHub上获得了 **12244** 个Star。简单来说，它是一款九头蛇，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍 H Y D R A(c) 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David (dot) Maciejak @ gmail (dot) com BFG code by Jan Dlabal Licensed under AGPLv3 (see LICENSE file)Please do not use in military or secret service organizations, or for illegal purposes. (This is the wish of the author and non-binding. Many people working in these organizations do not care for laws and ethics anyway. You are not one of the "good" ones if you ignore this.)NOTE: No, this is not meant to be a markdown doc! old school!Hydra in the most current GitHub state can be directly downloaded via Docker:docker pull vanhauser/hydra INTRODUCTION ------------ Number one of the biggest security holes are passwords, as every password security study shows. This tool is a proof-of-concept code to give researchers and security consultants the possibility of showing how easy it would be to gain unauthorized access from a remote to a system.THIS TOOL IS FOR LEGAL PURPOSES ONLY!There are already several login hacker tools available; however, none of them support more than one protocol to attack or support parallelized connects.It was tested to compile cleanly on Linux, Windows/Cygwin, Solaris, FreeBSD/OpenBSD, QNX (Blackberry 10), and MacOS.Currently, this tool supports the following protocols: Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-POST, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTPS-POST, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MEMCACHED, MONGODB, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, Radmin, RDP, Rexec, Rlogin, Rsh, RTSP, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP v1+v2+v3, SOCKS5, SSH (v1 and v2), SSHKEY, Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.However, the module engine for new services is very easy, so it won't take a long time until even more services are supported. Your help in writing, enhancing, or fixing modules is highly appreciated!! :-)WHERE TO GET ------------ You can always find the newest release/production version of Hydra at its project page at https://github.com/vanhauser-thc/thc-hydra/releases If you are interested in the current development state, the public development repository is on GitHub: svn co https://github.com/vanhauser-thc/thc-hydra or git clone https://github.com/vanhauser-thc/thc-hydra Use the development version at your own risk. It contains new features and new bugs. Things might not work!Alternatively (and easier), you can pull it as a Docker container:docker pull vanhauser/hydra HOW TO COMPILE -------------- To configure, compile, and install Hydra, just type:./configure make make install If you want the SSH module, you have to set up libssh (not libssh2!) on your system, get it from https://www.libssh.org, for ssh v1 support you also need to add the "-DWITH_SSH1=On" option in the cmake command line. IMPORTANT: If you compile on macOS, you must do this - do not install libssh via Homebrew.If you use Ubuntu/Debian, this will install the supplementary libraries needed for a few optional modules (note that some might not be available on your distribution):apt-get install libssl-dev libssh-dev libidn11-dev libpcre3-dev \ libgtk-3-dev libmysqlclient-dev libpq-dev libsvn-dev \ firebird-dev libmemcached-dev libgpg-error-dev \ libgcrypt11-dev libgcrypt20-dev freetds-dev This enables all optional modules and features except for Oracle, SAP R/3, NCP, and the Apple filing protocol - which you will need to download and install from the vendor's websites.For all other Linux derivatives and BSD-based systems, use the system software installer and look for similarly named libraries, like in the command above. In all other cases, you have to download all source libraries and compile them manually.SUPPORTED PLATFORMS ------------------- - All UNIX platforms (Linux, *BSD, Solaris, etc.) - MacOS (basically a BSD clone) - Windows with Cygwin (both IPv4 and IPv6) - Mobile systems based on Linux, MacOS, or QNX (e.g. Android, iPhone, Blackberry 10, Zaurus, iPaq)HOW TO USE ---------- If you just enter `hydra`, you will see a short summary of the important options available. Type `./hydra -h` to see all available command line options.Note that NO login/password file is included. Generate them yourself. A default password list is, however, present; use "dpl4hydra.sh" to generate a list.For Linux users, a GTK GUI is available; try `./xhydra`For the command line usage, the syntax is as follows: For attacking one target or a network, you can use the new "://" style: hydra [some command line options] PROTOCOL://TARGET:PORT/MODULE-OPTIONS The old mode can be used for these, too, and additionally, if you want to specify your targets from a text file; you *must* use this one:hydra [some command line options] [-s PORT] TARGET PROTOCOL [MODULE-OPTIONS] Via the command line options, you specify which logins to try, which passwords, if SSL should be used, how many parallel tasks should be used for attacking, etc.PROTOCOL is the protocol you want to use for attacking, e.g., ftp, SMTP, http-get or many others are available TARGET is the target you want to attack MODULE-OPTIONS are optional values that are special per PROTOCOL moduleFIRST - select your target You have three options on how to specify the target you want to attack: 1. A single target on the command line: just put the IP or DNS address in 2. A network range on the command line: CIDR specification like "192.168.0.0/24" 3. A list of hosts in a text file: one line per entry (see below)SECOND - select your protocol Try to avoid telnet, as it is unreliable for detecting a correct or false login attempt. Use a port scanner to see which protocols are enabled on the target.THIRD - check if the module has optional parameters hydra -U PROTOCOL e.g. hydra -U smtpFOURTH - the destination port This is optional; if no port is supplied, the default common port for the PROTOCOL is used. If you specify SSL to use ("-S" option), the SSL common port is used by default.If you use "://" notation, you must use "[" "]" brackets if you want to supply IPv6 addresses or CIDR ("192.168.0.0/24") notations to attack: hydra [some command line options] ftp://[192.168.0.0/24]/ hydra [some command line options] -6 smtps://[2001:db8::1]/NTLMNote that everything Hydra does is IPv4 only! If you want to attack IPv6 addresses, you must add the "-6" command line option. All attacks are then IPv6 only!If you want to supply your targets via a text file, you can not use the :// notation, but use the old style and just supply the protocol (and module options): hydra [some command line options] -M targets.txt ftp You can also supply the port for each target entry by adding ":" after a target entry in the file, e.g.:foo.bar.com target.com:21 unusual.port.com:2121 default.used.here.com 127.0.0.1 127.0.0.1:2121 Note that if you want to attach IPv6 targets, you must supply the -6 option and *must* put IPv6 addresses in brackets in the file(!) like this:foo.bar.com target.com:21 [fe80::1%eth0] [2001::1] [2002::2]:8080 [2a01:24a:133:0:00:123:ff:1a] LOGINS AND PASSWORDS -------------------- You have many options on how to attack with logins and passwords With -l for login and -p for password, you tell Hydra that this is the only login and/or password to try. With -L for logins and -P for passwords, you supply text files with entries. e.g.:hydra -l admin -p password ftp://localhost/ hydra -L default_logins.txt -p test ftp://localhost/ hydra -l admin -P common_passwords.txt ftp://localhost/ hydra -L logins.txt -P passwords.txt ftp://localhost/ Additionally, you can try passwords based on the login via the "-e" option. The "-e" option has three parameters:s - try the login as password n - try an empty password r - reverse the login and try it as a password If you want to, e.g., try "try login as password and "empty password", you specify "-e sn" on the command line.But there are two more modes for trying passwords than -p/-P: You can use a text file where a login and password pair is separated by a colon, e.g.:admin:password test:test foo:bar This is a common default account style listing that is also generated by the dpl4hydra.sh default account file generator supplied with Hydra. You use such a text file with the -C option - note that in this mode you can not use -l/-L/-p/-P options (-e nsr however you can). Example:hydra -C default_accounts.txt ftp://localhost/ And finally, there is a brute-force mode with the -x option (which you can not use with -p/-P/-C):-x minimum_length:maximum_length:charset The charset definition is `a` for lowercase letters, `A` for uppercase letters, `1` for numbers and for anything else, what you supply is their real representation. Examples:-x 1:3:a generate passwords from length 1 to 3 with all lowercase letters -x 2:5:/ generate passwords from length 2 to 5 containing only slashes -x 5:8:A1 generate passwords from length 5 to 8 with uppercase and numbers -x '3:3:aA1&~#\\ "\'$%*?./§,;:!`' -v generates length 3 passwords with all 95 characters, and verbose. Example: hydra -l ftp -x 3:3:a ftp://localhost/ SPECIAL OPTIONS FOR MODULES --------------------------- Via the third command line parameter (TARGET SERVICE OPTIONAL) or the -m command line option, you can pass one option to a module. Many modules use this; a few require it!To see the special option of a module, type:hydra -U e.g../hydra -U http-post-formThe special options can be passed via the -m parameter, as 3rd command line option or in the service://target/option format.Examples (they are all equal):./hydra -l test -p test -m PLAIN 127.0.0.1 imap ./hydra -l test -p test 127.0.0.1 imap PLAIN ./hydra -l test -p test imap://127.0.0.1/PLAIN RESTORING AN ABORTED/CRASHED SESSION ------------------------------------ When Hydra is aborted with Control-C, killed, or crashes, it leaves a "hydra.restore" file behind, which contains all necessary information to restore the session. This session file is written every 5 minutes. NOTE: the hydra.restore file can NOT be copied to a different platform (e.g. from little endian to big endian, or from Solaris to AIX)HOW TO SCAN/CRACK OVER A PROXY ------------------------------ The environment variable HYDRA_PROXY_HTTP defines the web proxy (this works just for the HTTP services!). The following syntax is valid:HYDRA_PROXY_HTTP="http://123.45.67.89:8080/" HYDRA_PROXY_HTTP="http://login:password@123.45.67.89:8080/" HYDRA_PROXY_HTTP="proxylist.txt" The last example is a text file containing up to 64 proxies (in the same format definition as the other examples).For all other services, use the HYDRA_PROXY variable to scan/crack. It uses the same syntax. eg:HYDRA_PROXY=[connect|socks4|socks5]://[login:password@]proxy_addr:proxy_port for example: HYDRA_PROXY=connect://proxy.anonymizer.com:8000 HYDRA_PROXY=socks4://auth:pw@127.0.0.1:1080 HYDRA_PROXY=socksproxylist.txt ADDITIONAL HINTS ---------------- * Sort your password files by likelihood and use the -u option to find passwords much faster! * uniq your dictionary files! This can save you a lot of time :-) cat words.txt | sort | uniq > dictionary.txt * If you know that the target is using a password policy (allowing users only to choose a password with a minimum length of 6, containing at least one letter and one number, etc. use the tool pw-inspector, which comes along with the hydra package, to reduce the password list: cat dictionary.txt | pw-inspector -m 6 -c 2 -n > passlist.txtRESULTS OUTPUT --------------The results are output to stdio along with the other information. Via the -o command line option, the results can also be written to a file. Using -b, the format of the output can be specified. Currently, these are supported:* `text` - plain text format * `jsonv1` - JSON data using version 1.x of the schema (defined below). * `json` - JSON data using the latest version of the schema; currently, there is only version 1.If using JSON output, the results file may not be valid JSON if there are serious errors in booting Hydra.JSON Schema ----------- Here is an example of the JSON output. Notes on some of the fields:* `errormessages` - an array of zero or more strings that are normally printed to stderr at the end of Hydra's run. The text is very free-form. * `success` - indication if Hydra ran correctly without error (**NOT** if passwords were detected). This parameter is either the JSON value `true` or `false` depending on completion. * `quantityfound` - How many username+password combinations were discovered. * `jsonoutputversion` - Version of the schema, 1.00, 1.01, 1.11, 2.00, 2.03, etc. Hydra will make the second tuple of the version to always be two digits to make it easier for downstream processors (as opposed to v1.1 vs v1.10). The minor-level versions are additive, so 1.02 will contain more fields than version 1.00 and will be backward compatible. Version 2.x will break something from the version 1.x output.Version 1.00 example:{ "errormessages": [ "[ERROR] Error Message of Something", "[ERROR] Another Message", "These are very free form" ], "generator": { "built": "2021-03-01 14:44:22", "commandline": "hydra -b jsonv1 -o results.json ... ...", "jsonoutputversion": "1.00", "server": "127.0.0.1", "service": "http-post-form", "software": "Hydra", "version": "v8.5" }, "quantityfound": 2, "results": [ { "host": "127.0.0.1", "login": "bill@example.com", "password": "bill", "port": 9999, "service": "http-post-form" }, { "host": "127.0.0.1", "login": "joe@example.com", "password": "joe", "port": 9999, "service": "http-post-form" } ], "success": false } SPEED ----- Through the parallelizing feature, this password cracker tool can be very fast; however, it depends on the protocol. The fastest are generally POP3 and FTP. Experiment with the task option (-t) to speed things up! The higher - the faster ;-) (but too high - and it disables the service)STATISTICS ---------- Run against a SuSE Linux 7.2 on localhost with a "-C FILE" containing 295 entries (294 tries invalid logins, 1 valid). Every test was run three times (only for "1 task" just once), and the average was noted down.P A R A L L E L T A S K S SERVICE 1 4 8 16 32 50 64 100 128 ------- -------------------------------------------------------------------- telnet 23:20 5:58 2:58 1:34 1:05 0:33 0:45* 0:25* 0:55* ftp 45:54 11:51 5:54 3:06 1:25 0:58 0:46 0:29 0:32 pop3 92:10 27:16 13:56 6:42 2:55 1:57 1:24 1:14 0:50 imap 31:05 7:41 3:51 1:58 1:01 0:39 0:32 0:25 0:21 (*) Note: telnet timings can be VERY different for 64 to 128 tasks! e.g. with 128 tasks, running four times, resulted in timings between 28 and 97 seconds! The reason for this is unknown...guesses per task (rounded up):295 74 38 19 10 6 5 3 3guesses possible per connect ...{card-default label="? 工具信息" /} ? 项目地址：[https://github.com/vanhauser-thc/thc-hydra](https://github.com/vanhauser-thc/thc-hydra) ⭐ Star数：12244 ? 开发语言：C ? 项目描述：九头蛇 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/vanhauser-thc/thc-hydra/archive/refs/heads/master.zip"} {cloud type="default" title="网盘下载" url="https://github.com/vanhauser-thc/thc-hydra"}总的来说，**thc-hydra**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
网络安全工具 dirsearch 实战分享 推荐一个实用的开源工具——**dirsearch**。项目由maurosoria开发维护，GitHub上获得了 **14697** 个Star。简单来说，它是一款Web路径扫描仪，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍   > An advanced web path brute-forcer**dirsearch** is being actively developed by [@maurosoria](https://twitter.com/_maurosoria) and [@shelld3v](https://twitter.com/shells3c_).Join the [Discord server](https://discord.gg/2N22ZdAJRj) to communicate with the team.## Quick Startdirsearch requires Python 3.11 or higher. sh git clone https://github.com/maurosoria/dirsearch.git --depth 1 cd dirsearch python3 dirsearch.py -u https://example.com -e php,html,js You can also install the latest Python stack directly from GitHub with pip: sh pip3 install git+https://github.com/maurosoria/dirsearch.git dirsearch -u https://example.com -e php,html,js The Rust native backend is opt-in for source installs; see [Installation](docs/installation.md) for the native build steps.Pre-built PyInstaller binaries and portable folder archives are available on the [Releases page](https://github.com/maurosoria/dirsearch/releases). ## Documentation The full documentation now lives in [`docs/`](docs/index.md):- [Installation](docs/installation.md): supported platforms, Python install, release artifacts, and Docker. - [Usage Guide](docs/usage.md): common scans, recursion, filters, proxies, raw requests, reports, and tips. - [Wordlists](docs/wordlists.md): `%EXT%`, categories, templates, prefixes, suffixes, and transformations. - [CLI Options](docs/options.md): complete command-line reference. - [Configuration](docs/configuration.md): `config.ini` reference. - [Sessions](docs/sessions.md): save, list, and resume scan sessions. - [Python API](docs/python-api.md): importable API examples. - [Building](docs/building.md): PyInstaller, portable builds, Docker s, and GitHub Actions. - [References](docs/references.md): external tutorials and articles.## Minimal Examples sh python3 dirsearch.py -u https://target python3 dirsearch.py -u https://target -e php,html,js python3 dirsearch.py -u https://target -e php,html,js -w /path/to/wordlist python3 dirsearch.py -u https://target -r --max-recursion-depth 3 Use `python3 dirsearch.py -h` for common options or `python3 dirsearch.py -hh` for the complete CLI help.## Python APIdirsearch can also be used from Python code for local automation, MCP servers, REST wrappers, and agent-controlled scans. The importable API keeps its configuration in `FuzzerConfig`, so callers do not need to parse CLI flags or mutate CLI globals.See [Python API](docs/python-api.md) for examples covering templates, custom wordlists, callbacks, authenticated sessions, and agent-oriented scan recipes.## Contributing Pull requests and feature requests are welcome. See [CONTRIBUTORS.md](CONTRIBUTORS.md) for the people who have helped improve dirsearch. ## License Copyright (C) Mauro Soria (maurosoria@gmail.com)License: GNU General Public License, version 2. {card-default label="? 工具信息" /} ? 项目地址：[https://github.com/maurosoria/dirsearch](https://github.com/maurosoria/dirsearch) ⭐ Star数：14697 ? 开发语言：Python ? 项目描述：Web路径扫描仪 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/maurosoria/dirsearch/archive/refs/heads/master.zip"} {cloud type="default" title="网盘下载" url="https://github.com/maurosoria/dirsearch"}总的来说，**dirsearch**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
免费开源绿色软件推荐：fuzzdb-collect 下载 推荐一个实用的开源工具——fuzzdb-collect。项目由euphratica开发维护，采用未知开源协议发布。简单来说，它是一个网络上安全资源的搜集，对于站长和开发者来说是个不错的工具。 工具功能介绍 项目简介 Scanners Box是一个集合github平台上的安全行业从业者自研开源扫描器的仓库，包括子域名枚举、数据库漏洞扫描、弱口令或信息泄漏扫描、端口扫描、指纹识别以及其他大型扫描器或模块化扫描器，同时该仓库只收录各位网友自己编写的一般性开源扫描器，类似awvs、nmap、w3af等知名扫描工具不收录。 恶意软件 https://github.com/deadPix3l/CryptSky/ （勒索软件） DDOS防护 https://github.com/ywjt/Dshield waf开源及规则 https://github.com/SpiderLabs/ModSecurity https://github.com/xsec-lab/x-waf https://github.com/loveshell/ngx_lua_waf https://github.com/SpiderLabs/owasp-modsecurity-crs/tree/master/base_rules 入门指南 https://wizardforcel.gitbooks.io/web-hacking-101/content/ Web Hacking 101 中文版 https://wizardforcel.gitbooks.io/asani/content/ 浅入浅出Android安全 中文版 https://wizardforcel.gitbooks.io/lpad/content/ Android 渗透测试学习手册 中文版 https://wizardforcel.gitbooks.io/kali-linux-web-pentest-cookbook/content/ Kali Linux Web渗透测试秘籍 中文版 https://github.com/hardenedlinux/linux-exploit-development-tutorial Linux exploit 开发入门 https://www.gitbook.com/book/t0data/burpsuite/details burpsuite实战指南 http://www.kanxue.com/?article-read-1108.htm=&winzoom=1 渗透测试Node.js应用 https://github.com/qazbnm456/awesome-web-security Web安全资料和资源列表 https://sec-wiki.com/ sec-wiki安全维基百科 fuzz工具收集 https://github.com/ivanfratric/winafl https://github.com/attekett/NodeFuzz https://github.com/google/oss-fuzz http://blog.topsec.com.cn/ad_lab/alphafuzzer/ http://llvm.org/docs/LibFuzzer.html 子域名枚举扫描器或爆破工具 https://github.com/n4xh4ck5/N4xD0rk （利用搜索引擎来搜集子域名，可以使用西班牙语搜集） https://github.com/jonluca/Anubis https://github.com/lijiejie/subDomainsBrute (lijiejie开发的一款使用广泛的子域名爆破枚举工具) https://github.com/ring04h/wydomain (猪猪侠开发的一款域名收集全面、精准的子域名枚举工具) https://github.com/le4f/dnsmaper (子域名枚举爆破工具以及地图位置标记) https://github.com/0xbug/orangescan (提供web界面的在线子域名信息收集工具) https://github.com/TheRook/subbrute （高效精准的子域名爆破工具,同时也是扫描器中最常用的子域名API库) https://github.com/We5ter/GSDF (基于谷歌SSL透明证书的子域名查询脚本) https://github.com/mandatoryprogrammer/cloudflare_enum （使用CloudFlare进行子域名枚举的脚本） https://github.com/guelfoweb/knock (Knock子域名获取，可用于查找子域名接管漏洞) https://github.com/exp-db/PythonPool/tree/master/Tools/DomainSeeker （多方式收集目标子域名信息） https://github.com/code-scan/BroDomain (兄弟域名查询） https://github.com/chuhades/dnsbrute (高效的子域名爆破工具) https://github.com/yanxiu0614/subdomain3 (一款高效的子域名爆破工具） https://github.com/michenriksen/aquatone (子域名枚举、探测工具。可用于子域名接管漏洞探测) https://github.com/evilsocket/dnssearch (一款子域名爆破工具) https://github.com/reconned/domained (可用于子域名收集的一款工具） https://github.com/bit4woo/Teemo (域名收集及枚举工具) https://github.com/laramies/theHarvester ( https://github.com/swisskyrepo/Subdomino (子域名枚举，端口扫描，服务存活确认） https://github.com/nmalcolm/Inventus (通过爬虫实现的子域名收集工具） https://github.com/aboul3la/Sublist3r (快速子域枚举工具) 数据库类漏洞扫描器或爆破工具 https://github.com/0xbug/SQLiScanner (一款基于SQLMAP和Charles的被动SQL注入漏洞扫描工具) https://github.com/sqlmapproject/sqlmap （注入工具之王sqlmap） https://github.com/stamparm/DSSS (99行代码实现的sql注入漏洞扫描器) https://github.com/LoRexxar/Feigong （针对各种情况自由变化的MySQL注入脚本） https://github.com/youngyangyang04/NoSQLAttack (一款针对mongoDB的攻击工具) https://github.com/Neohapsis/bbqsql （SQL盲注利用框架） https://github.com/NetSPI/PowerUpSQL （攻击SQLSERVER的Powershell脚本框架） https://github.com/WhitewidowScanner/whitewidow (一款数据库扫描器) https://github.com/stampery/mongoaudit (MongoDB审计及渗透工具） https://github.com/torque59/Nosql-Exploitation-Framework (NoSQL扫描/爆破工具） https://github.com/missDronio/blindy (MySQL盲注爆破工具） https://github.com/fengxuangit/Fox-scan (基于SQLMAP的主动和被动资源发现的漏洞扫描工具） https://github.com/NetSPI/PowerUpSQL (用于SQL Server审计的powershell脚本） https://github.com/JohnTroony/Blisqy （用于- http header中的时间盲注爆破工具，仅针对MySQL/MariaDB） https://github.com/ron190/jsql-injection (Java 编写的SQL注入工具) https://github.com/Hadesy2k/sqliv (基于搜索引擎的批量SQL注入漏洞扫描器） https://github.com/UltimateHackers/sqlmate (在sqlmap基础上增加了目录扫描、hash爆破等功能) 弱口令/弱用户名扫描器或爆破工具 https://github.com/lijiejie/htpwdScan (一个简单的- http暴力破解、撞库攻击脚本) https://github.com/ysrc/F-Scrack （对各类服务进行弱口令检测的脚本) https://github.com/Mebus/cupp （根据用户习惯生成弱口令探测字典脚本） https://github.com/netxfly/crack_ssh （Go写的协程版的ssh edis\mongodb弱口令破解工具） https://github.com/LandGrey/pydictor (暴力破解字典建立工具) https://github.com/shengqi158/weak_password_detect (多线程探测弱口令） https://github.com/UltimateHackers/Blazy (支持测试 CSRF, Clickjacking, Cloudflare and WAF的弱口令探测器） 物联网设备识别工具或扫描器 https://github.com/reverse-shell/routersploit （路由器漏洞利用框架） https://github.com/jh00nbr/Routerhunter-2.0 （路由器漏洞扫描利用) https://github.com/RUB-NDS/PRET （打印机攻击框架） https://github.com/rapid7/IoTSeeker （物联网设备默认密码扫描检测工具) https://github.com/shodan-labs/iotdb (使用nmap扫描IoT设备) https://github.com/googleinurl/RouterHunterBR （路由器设备漏洞扫描利用) https://github.com/scu-igroup/telnet-scanner (Telnet服务密码撞库) 反射型或DOM-Based XSS扫描器 https://github.com/shawarkhanethicalhacker/BruteXSS （一款XSS扫描器,可暴力注入参数） https://github.com/1N3/XSSTracer (小型XSS扫描器,也可检测CRLF、XSS、点击劫持的) https://github.com/0x584A/fuzzXssPHP (PHP版本的反射型xss扫描) https://github.com/chuhades/xss_scan (批量扫描XSS的python脚本） https://github.com/BlackHole1/autoFindXssAndCsrf (自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件） https://github.com/shogunlab/shuriken (使用命令行进行XSS批量检测) https://github.com/UltimateHackers/XSStrike (可识别并绕过WAF的XSS扫描工具) https://github.com/stamparm/DSXS (支持GET、POST方式的高效XSS扫描器） 企业资产管理或信息泄露搜集工具 https://github.com/ysrc/xunfeng (网络资产识别引擎，漏洞检测引擎） https://github.com/laramies/theHarvester （企业被搜索引擎收录敏感资产信息监控脚本：员工 https://github.com/x0day/Multisearch-v2 (Bing、google、360、zoomeye等搜索引擎聚合搜索，可用于发现企业被搜索引擎收录的敏感资产信息） https://github.com/Ekultek/Zeus-Scanner (集成化的综合搜索引擎，能够抓取被搜索引擎隐藏的url,并交由sqlmap、nmap扫描） https://github.com/0xbug/Biu-framework (企业内网基础服务安全扫描框架) https://github.com/metac0rtex/GitHarvester (github Repo信息搜集工具) https://github.com/shengqi158/svnhack （.svn文件夹泄漏利用工具） https://github.com/repoog/GitPrey (GitHub敏感信息扫描工具) https://github.com/0xbug/Hawkeye (企业资产、敏感信息GitHub泄露监控系统） https://github.com/lianfeng30/githubscan （根据企业关键词进行项目检索以及相应敏感文件和文件内容扫描的工具） https://github.com/UnkL4b/GitMiner （github敏感信息搜索工具） https://github.com/lijiejie/GitHack (.git文件夹泄漏利用工具) https://github.com/dxa4481/truffleHog (GitHub敏感信息扫描工具,包括检测commit等) https://github.com/sowish/LNScan （详细的内部网络信息扫描器） https://github.com/SkyLined/LocalNetworkScanner (javascript实现的本地网络扫描器) https://github.com/x0day/Multisearch-v2 (搜索引擎聚合搜索，可用于发现企业被搜索引擎收录的敏感资产信息） webshell检测或病毒分析工具 https://github.com/ym2011/ScanBackdoor （一款简洁的Webshell扫描工具） https://github.com/yassineaddi/BackdoorMan （可对指定目录进行php webshell检测） https://github.com/he1m4n6a/findWebshell （一款简单的webshell检测工具) https://github.com/Tencent/HaboMalHunter （哈勃分析系统，linux系统病毒分析及安全检测） https://github.com/PlagueScanner/PlagueScanner (使用python实现的集成ClamAV、ESET、Bitdefender的反病毒引擎) https://github.com/nbs-system/php-malware-finder (一款高效率PHP-webshell扫描工具) https://github.com/emposha/PHP-Shell-Detector/ (测试效率高达99%的webshell检测工具) https://github.com/erevus-cn/scan_webshell (一款简洁的Webshell扫描工具） https://github.com/emposha/Shell-Detector （Webshell扫描工具，支持php/perl/asp/aspx webshell扫描) https://github.com/m4rco-/dorothy2 (一款木马、僵尸网络分析框架） 内网渗透或扫描工具 https://github.com/0xwindows/VulScritp （企业内网渗透脚本，包括banner扫描、端口扫描；phpmyadmin、jenkins等通用漏洞利用等） https://github.com/lcatro/network_backdoor_scanner （基于网络流量的内网探测框架） https://github.com/fdiskyou/hunter （调用 Windows API 枚举用户登录信息） https://github.com/BlackHole1/WebRtcXSS （自动化利用XSS入侵内网） https://github.com/0xwindows/VulScritp （企业内网渗透脚本，包括banner扫描、端口扫描；各种通用漏洞利用等） https://github.com/fdiskyou/hunter （调用 Windows API 枚举用户登录信息） https://github.com/AlessandroZ/LaZagne （本机密码查看提取工具） https://github.com/huntergregal/mimipenguin （linux密码抓取神器） 中间件扫描器或识别工具 https://nmap.org/download.html (Nmap端口扫描器之王,- https://svn.nmap.org/) https://github.com/ring04h/wyportmap (目标端口扫描+系统服务指纹识别) https://github.com/ring04h/weakfilescan (动态多线程敏感信息泄露检测工具) https://github.com/EnableSecurity/wafw00f (WAF产品指纹识别) https://github.com/rbsec/sslscan （ssl类型识别) https://github.com/urbanadventurer/whatweb (web指纹识别) https://github.com/tanjiti/FingerPrint (web应用指纹识别) https://github.com/nanshihui/Scan-T （网络爬虫式指纹识别) https://github.com/OffensivePython/Nscan (a fast Network scanner inspired by Masscan and Zmap) https://github.com/ywolf/F-NAScan (网络资产信息扫描, ICMP存活探测,端口扫描，端口指纹服务识别） https://github.com/ywolf/F-MiddlewareScan （中间件扫描） https://github.com/maurosoria/dirsearch (Web path scanner) https://github.com/x0day/bannerscan （C段Banner与路径扫描） https://github.com/RASSec/RASscan (端口服务扫描) https://github.com/3xp10it/bypass_waf （waf自动暴破） https://github.com/3xp10it/xcdn (尝试找出cdn背后的真实ip) https://github.com/Xyntax/BingC （基于Bing搜索引擎的C段/旁站查询，多线程，支持API） https://github.com/Xyntax/DirBrute （多线程WEB目录爆破工具） https://github.com/zer0h/- httpscan （一个爬虫式的网段Web主机发现小工具） https://github.com/lietdai/doom （thorn上实现的分布式任务分发的ip端口漏洞扫描器） https://github.com/chichou/grab.js (类似 zgrab 的快速 TCP 指纹抓取解析工具，支持更多协议) https://github.com/Nitr4x/whichCDN (CDN识别、检测） https://github.com/secfree/bcrpscan (基于爬虫的web路径扫描器) https://github.com/ring04h/wyportmap (目标端口扫描+系统服务指纹识别) https://github.com/rbsec/sslscan （SSL类型识别) https://github.com/urbanadventurer/whatweb (Web指纹识别) https://github.com/tanjiti/FingerPrint (Web应用指纹识别) https://github.com/OffensivePython/Nscan (基于Masscan和Zmap的网络扫描器) https://github.com/maurosoria/dirsearch (web路径收集与扫描) https://github.com/3xp10it/xcdn (尝试找出cdn背后的真实ip) https://github.com/lietdai/doom （Thorn上实现的分布式任务分发的ip端口漏洞扫描器） https://github.com/mozilla/ssh_scan (服务器ssh配置信息扫描） https://github.com/18F/domain-scan (针对域名及其子域名的资产数据检测／扫描，包括- http/- https检测等） https://github.com/ggusoft/inforfinder (域名资产收集及指纹识别工具） https://github.com/boy-hack/gwhatweb (CMS识别 python gevent实现) https://github.com/Mosuan/FileScan (敏感文件扫描 / 二次判断降低误报率 / 扫描内容规则化 / 多目录扫描) https://github.com/Xyntax/FileSensor (基于爬虫的动态敏感文件探测工具) https://github.com/deibit/cansina (web路径扫描工具） https://github.com/0xbug/Howl (网络设备 web 服务指纹扫描与检索) https://github.com/mozilla/cipherscan (目标主机服务ssl类型识别) https://github.com/xmendez/wfuzz (Web应用fuzz工具、框架，同时可用于web路径/服务扫描） https://github.com/UltimateHackers/Breacher (多线程的后台路径扫描器，也可用于发现Execution After Redirect漏洞） https://github.com/ztgrace/changeme (弱口令扫描器，不仅支持普通登录页，也支持ssh、mongodb等组件） https://github.com/medbenali/CyberScan (渗透测试辅助工具，支持分析数据包、解码、端口扫描、IP地址分析等） https://github.com/m0nad/HellRaiser (基于nmap的扫描器，与cve漏洞关联） https://github.com/scipag/vulscan (基于nmap的高级漏洞扫描器，命令行环境使用） https://github.com/jekyc/wig (web应用信息搜集工具） https://github.com/eldraco/domain_analyzer (围绕web服务的域名进行信息收集和"域传送"等漏洞扫描，也支持针对背后的服务器端口扫描等） https://github.com/cloudtracer/paskto (基于Nikto扫描规则的被动式路径扫描以及信息爬虫） https://github.com/zerokeeper/WebEye (快速识别WEB服务器类型、CMS类型、WAF类型、WHOIS信息、以及语言框架) https://github.com/m3liot/shcheck (用于检查web服务的- http header的安全性) https://github.com/aipengjie/sensitivefilescan (一款高效快捷的敏感文件扫描工具） https://github.com/fnk0c/cangibrina (通过字典穷举、google、robots.txt等途径的跨平台后台管理路径扫描器） https://github.com/n4xh4ck5/CMSsc4n (CMS指纹识别） 专用（即特定性针对某些组件）扫描器 https://github.com/brianwrf/hackUtils （java反序列化利用工具集） https://github.com/frohoff/ysoserial （ java反序列化利用工具） https://github.com/blackye/Jenkins (Jenkins漏洞探测、用户抓取爆破) https://github.com/code-scan/dzscan (discuz漏洞扫描) https://github.com/chuhades/CMS-Exploit-Framework (CMS攻击框架) https://github.com/lijiejie/IIS_shortname_Scanner (IIS短文件名漏洞扫描) https://github.com/riusksk/FlashScanner (flashxss扫描) https://github.com/coffeehb/SSTIF （服务器端模板注入漏洞的半自动化工具） https://github.com/epinna/tplmap (服务器端模板注入漏洞检测与利用工具) https://github.com/cr0hn/dockerscan (docker扫描工具) https://github.com/GoSecure/break-fast-serial （借助DNS解析来检测Java反序列化漏洞工具） https://github.com/dirtycow/dirtycow.github.io （脏牛提权漏洞exp） https://github.com/code-scan/dzscan (首款集成化的Discuz扫描工具) https://github.com/chuhades/CMS-Exploit-Framework (一款简洁优雅的CMS扫描利用框架) https://github.com/lijiejie/IIS_shortname_Scanner （IIS短文件名暴力枚举漏洞利用工具) https://github.com/coffeehb/SSTIF （一个Fuzzing服务器端模板注入漏洞的半自动化工具） https://github.com/cr0hn/dockerscan (Docker扫描工具) https://github.com/m4ll0k/WPSeku (一款精简的wordpress扫描工具) https://github.com/rastating/wordpress-exploit-framework (集成化wordpress漏洞利用框架) https://github.com/ilmila/J2EEScan (用于扫描J2EE应用的一款burpsuite插件) https://github.com/riusksk/StrutScan (一款基于perl的strut2的历史漏洞扫描器) https://github.com/D35m0nd142/LFISuite (本地文件包含漏洞利用及扫描工具，支持反弹shell) https://github.com/0x4D31/salt-scanner (基于Salt Open以及Vulners Linux Audit API的linux漏洞扫描器，支持与JIRA、slack平台结合使用) https://github.com/tijme/angularjs-csti-scanner (自动化探测客户端AngularJS模板注入漏洞工具) https://github.com/irsdl/IIS-ShortName-Scanner (Java编写的IIS短文件名暴力枚举漏洞利用工具) https://github.com/swisskyrepo/Wordpresscan (基于WPScan以及WPSeku的优化版wordpress扫描器) https://github.com/CHYbeta/cmsPoc (CMS渗透测试框架） https://github.com/rudSarkar/crlf-injector (CRLF注入漏洞批量扫描） https://github.com/3gstudent/Smbtouch-Scanner (自动化扫描内网中存在的由shadow brokers泄露的ETERNAL系列漏洞) https://github.com/utiso/dorkbot （通过定制化的谷歌搜索引擎进行漏洞页面搜寻及扫描） https://github.com/OsandaMalith/LFiFreak （本地文件包含漏洞利用及扫描工具，支持反弹shell) https://github.com/mak-/parameth (用于枚举脚本的GET/POST未知参数字段） https://github.com/Lucifer1993/struts-scan (struts2漏洞全版本检测和利用工具) https://github.com/hahwul/a2sv (SSL漏洞扫描，例如心脏滴血漏洞等） https://github.com/NullArray/DorkNet (基于搜索引擎的漏洞网页搜寻） https://github.com/NickstaDB/BaRMIe (用于攻击爆破Java Remote Method Invocation服务的工具) https://github.com/RetireJS/grunt-retire (扫描js扩展库的常见漏洞） https://github.com/kotobukki/BDA (针对hadoop/spark等大数据平台的的漏洞探测工具） https://github.com/jagracey/Regex-DoS (RegEx 拒绝服务扫描器) https://github.com/milesrichardson/docker-onion-nmap (使用nmap扫描Tor网络上隐藏的"onion"服务) https://github.com/Moham3dRiahi/XAttacker (Web CMS Exploit 工具,包含针对主流 CMS 的 66 个不同的 Exploits) https://github.com/lijiejie/BBScan (一个迷你的信息泄漏批量扫描脚本) 无线网络（审计）扫描器 https://github.com/savio-code/fern-wifi-cracker/ (无线安全审计工具) https://github.com/m4n3dw0lf/PytheM （Python网络/渗透测试工具） https://github.com/P0cL4bs/WiFi-Pumpkin （无线安全渗透测试套件） https://github.com/MisterBianco/BoopSuite (无线网络审计工具，支持2-5GHZ频段） https://github.com/DanMcInerney/LANs.py (ARP欺骗，无线网络劫持） https://github.com/besimaltnok/PiFinger (检查wifi是否是"大菠萝"所开放的热点，并给予网络评分） https://github.com/derv82/wifite2 （自动化无线网络攻击工具wifite的重构版本） 局域网络（本地网络）扫描器 https://github.com/sowish/LNScan (基于BBScan via.lijiejie的本地网络扫描) https://github.com/niloofarkheirkhah/nili （网络扫描，中间人攻击，协议检测与逆向） https://github.com/SkyLined/LocalNetworkScanner （基于javascript的本地网络扫描) 代码审计工具或扫描器 https://github.com/wufeifei/cobra (白盒代码安全审计系统) https://github.com/OneSourceCat/phpvulhunter (静态php代码审计) https://github.com/Qihoo360/phptrace (跟踪、分析PHP运行情况的工具） https://github.com/ajinabraham/NodeJsScan (NodeJS应用代码审计） https://github.com/shengqi158/pyvulhunter （Python应用审计） https://github.com/presidentbeef/brakeman ( Ruby on ... 综合来看，fuzzdb-collect在同类工具中还是有一定优势的，特别是在功能完整性和易用性方面表现不错。如果你有相关需求，可以下载试试。 {card-default label="? 工具信息" /} ? 工具名称：fuzzdb-collect ? 开发作者：euphratica ? 工具描述：网络上安全资源的搜集 ? 开发语言：Python ? 开源协议：未知开源协议 ⭐ Star数：2 | ? Fork数：1 ? 更新时间：2026年08月06日 {/card-default} {cloud type="default" title="网盘下载" url="https://gitee.com/euphratica/fuzzdb-collect/repository/archive/master.zip"} {cloud type="default" title="网盘下载" url="https://gitee.com/euphratica/fuzzdb-collect.git"}
-
运维安全必备：subfinder 工具解析 推荐一个实用的开源工具——**subfinder**。项目由projectdiscovery开发维护，GitHub上获得了 **14394** 个Star。简单来说，它是一款快速被动子域枚举工具。，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍 Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord ---`subfinder` is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. `subfinder` is built for doing one thing only - passive subdomain enumeration, and it does that very well.We have made it to comply with all the used passive source licenses and usage restrictions. The passive model guarantees speed and stealthiness that can be leveraged by both penetration testers and bug bounty hunters alike.- Fast and powerful resolution and wildcard elimination modules - **Curated** passive sources to maximize results - Multiple output formats supported (JSON, file, stdout) - Optimized for speed and **lightweight** on resources - **STDIN/OUT** support enables easy integration into workflows# Usage sh subfinder -h This will display help for the tool. Here are all the switches it supports. yaml Usage: ./subfinder [flags]Flags: INPUT: -d, -domain string[] domains to find subdomains for -dL, -list string file containing list of domains for subdomain discoverySOURCE: -s, -sources string[] specific sources to use for discovery (-s crtsh,github). Use -ls to display all available sources. -recursive use only sources that can handle subdomains recursively (e.g. subdomain.domain.tld vs domain.tld) -all use all sources for enumeration (slow) -es, -exclude-sources string[] sources to exclude from enumeration (-es alienvault,zoomeyeapi)FILTER: -m, -match string[] subdomain or list of subdomain to match (file or comma separated) -f, -filter string[] subdomain or list of subdomain to filter (file or comma separated)RATE-LIMIT: -rl, -rate-limit int maximum number of http requests to send per second -rls value maximum number of http requests to send per second for providers in key=value format (-rls "hackertarget=10/s,shodan=15/s") -t int number of concurrent goroutines for resolving (-active only) (default 10)UPDATE: -up, -update update subfinder to latest version -duc, -disable-update-check disable automatic subfinder update checkOUTPUT: -o, -output string file to write output to -oJ, -json write output in JSONL(ines) format -oD, -output-dir string directory to write output (-dL only) -cs, -collect-sources include all sources in the output (-json only) -oI, -ip include host IP in output (-active only)CONFIGURATION: -config string flag config file (default "$CONFIG/subfinder/config.yaml") -pc, -provider-config string provider config file (default "$CONFIG/subfinder/provider-config.yaml") -r string[] comma separated list of resolvers to use -rL, -rlist string file containing list of resolvers to use -nW, -active display active subdomains only -proxy string http proxy to use with subfinder -ei, -exclude-ip exclude IPs from the list of domains -mr, -max-results int limit the number of results per source (0 = unlimited; honored by paginating sources)DEBUG: -silent show only subdomains in output -version show version of subfinder -v show verbose output -nc, -no-color disable color in output -ls, -list-sources list all available sources (-oJ for JSON)OPTIMIZATION: -timeout int seconds to wait before timing out (default 30) -max-time int minutes to wait for enumeration results (default 10) -rsr, -response-size-read int max response body size to read in bytes from passive sources (0 = unlimited) ## Environment VariablesSubfinder supports environment variables to specify custom paths for configuration files:- `SUBFINDER_CONFIG` - Path to config.yaml file (overrides default `$CONFIG/subfinder/config.yaml`) - `SUBFINDER_PROVIDER_CONFIG` - Path to provider-config.yaml file (overrides default `$CONFIG/subfinder/provider-config.yaml`) # Installation`subfinder` requires **go1.24** to install successfully. Run the following command to install the latest version: sh go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest Learn about more ways to install subfinder here: https://docs.projectdiscovery.io/tools/subfinder/install. ## Post Installation Instructions`subfinder` can be used right after the installation, however many sources required API keys to work. Learn more here: https://docs.projectdiscovery.io/tools/subfinder/install#post-install-configuration. ## Running SubfinderLearn about how to run Subfinder here: https://docs.projectdiscovery.io/tools/subfinder/running. ## Subfinder Go librarySubfinder can also be used as library and a minimal examples of using subfinder SDK is available [here](examples/main.go) # ## Resources- [Recon with Me !!!](https://dhiyaneshgeek.github.io/bug/bounty/2020/02/06/recon-with-me/) # License`subfinder` is made with ? by the [projectdiscovery](https://projectdiscovery.io) team. Community contributions have made the project what it is. See the **[THANKS.md](https://github.com/projectdiscovery/subfinder/blob/main/THANKS.md)** file for more details.Read the usage disclaimer at [DISCLAIMER.md](https://github.com/projectdiscovery/subfinder/blob/main/DISCLAIMER.md) and [contact us](mailto:contact@projectdiscovery.io) for any API removal. {card-default label="? 工具信息" /} ? 项目地址：[https://github.com/projectdiscovery/subfinder](https://github.com/projectdiscovery/subfinder) ⭐ Star数：14394 ? 开发语言：Go ? 项目描述：快速被动子域枚举工具。 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/projectdiscovery/subfinder/archive/refs/heads/dev.zip"} {cloud type="default" title="网盘下载" url="https://github.com/projectdiscovery/subfinder"}总的来说，**subfinder**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
hashcat - 渗透测试人员必备工具 推荐一个实用的开源工具——hashcat。项目由hashcat开发维护，GitHub上获得了 26717 个Star。简单来说，它是一款全球最快、最先进的密码恢复实用程序，对于站长和开发者来说是个不错的工具。 工具功能介绍 hashcat is a highly optimized password recovery platform for GPUs, CPUs, and large distributed systems. Features ###* World's fastest password cracker World's first and only in-kernel rule engine Free and open source, under the MIT license Multi-OS: Linux, Windows and macOS Multi-backend: CUDA, HIP, Metal and OpenCL Multi-device: several devices, and mixed device types, in one system Multi-hash: cracks large numbers of hashes at once Over 590 hash modes, each written with performance in mind 5 attack modes: wordlist, brute-force, PCFG, hybrid and association Assimilation bridge: add a hash mode in C, Python or Rust, without writing a kernel Brain: skips candidates an earlier session already tried Distributed cracking networks, using an overlay Reads candidates from a wordlist, from stdin, or from another program Markov chain keyspace ordering, so the likely candidates come first Automatic performance tuning per device Interactive pause and resume Named sessions, and restore after an interruption Built-in benchmark Integrated thermal watchdog Hex salt and hex charset, for hashes and character sets that are not text Encrypted plains: crack a hash for someone else without being able to read the password Keyboard layout mapping, for full disk encryption passwords typed on a non-US keyboard License ###hashcat is licensed under the MIT license. See docs/license.txt. Installation ###Download the latest release and unpack it where you want it. Use 7z x when unpacking from the command line, so the full file paths stay intact.Your platform may also provide packages. Building ###Building from source is optional. The release package is the same program, and a binary you build yourself will not crack any faster. Build it if you want a change of your own, a fix that is in master but not yet released, or a platform we do not ship a binary for.See BUILD.md for how.Tests:Build | BSD | Rust Usage and help ###Start with --help, also kept in the tree as docs/hashcat-help.md. One example hash per mode is in docs/hashcat-example-hashes.md.The wiki and the FAQ go further. The forum holds years of answered questions. If you still need help from a real human, come to Discord. Documentation ###The docs directory covers each feature. The ones people ask about most:* Plugin development guide, for adding a hash mode Assimilation bridge, and its Python and Rust quickstarts Generic attack mode and PCFG Brain, slow candidates, encrypted plains Keyboard layout mapping Compression libraries, for reading gzip, xz and zstd files Release notes for v7.1.0, and the full changelog Contributing ###Contributions are welcome. CONTRIBUTING.md has the code style, what a pull request needs, and how to test a change before you send it. Security ###SECURITY.md has how to report a vulnerability, and what counts as one. Happy Cracking! {card-default label="? 工具信息" /} ? 项目地址：https://github.com/hashcat/hashcat ⭐ Star数：26717 ? 开发语言：C ? 项目描述：全球最快、最先进的密码恢复实用程序 {/card-default} {cloud type="default" title="网盘下载" url="https://github.com/hashcat/hashcat/archive/refs/heads/master.zip"} {cloud type="default" title="网盘下载" url="https://github.com/hashcat/hashcat"} 总的来说，hashcat是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
nmap 功能特性与应用场景 推荐一个实用的开源工具——nmap。项目由nmap开发维护，GitHub上获得了 13532 个Star。简单来说，它是一款Nmap -网络映射器。官方SVN存储库的Github镜像。，对于站长和开发者来说是个不错的工具。 工具功能介绍 Nmap ====Nmap is released under a custom license, which is based on (but not compatible with) GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for full details.The latest version of this software as well as binary installers for Windows, macOS, and Linux (RPM) are available from Nmap.orgFull documentation is also available on the Nmap.org website.Questions and suggestions may be sent to the Nmap-dev mailing list.Installing Ideally, you should be able to just type:./configure make make installFor far more in-depth compilation, installation, and removal notes, read the Nmap Install Guide on Nmap.org.Using Nmap Nmap has a lot of features, but getting started is as easy as running `nmap scanme.nmap.org. Running nmap` without any parameters will give a helpful list of the most common options, which are discussed in depth in [the man page](https://nmap.org/book/man.html). Users who prefer a graphical interface can use the included Zenmap front-end.Contributing Information about filing bug reports and contributing to the Nmap project can be found in the HACKING and CONTRIBUTING.md files. {card-default label="? 工具信息" /} ? 项目地址：https://github.com/nmap/nmap ⭐ Star数：13532 ? 开发语言：C ? 项目描述：Nmap -网络映射器。官方SVN存储库的Github镜像。 {/card-default} {cloud type="default" title="网盘下载" url="https://github.com/nmap/nmap/archive/refs/heads/master.zip"} {cloud type="default" title="网盘下载" url="https://github.com/nmap/nmap"} 总的来说，nmap是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
beef 安装配置与使用指南 推荐一个实用的开源工具——**beef**。项目由beefproject开发维护，GitHub上获得了 **11003** 个Star。简单来说，它是一款Browser Exploitation Framework项目，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍 ===============================================================================Copyright (c) 2006-2026 Wade Alcorn - wade@bindshell.net Browser Exploitation Framework (BeEF) - https://beefproject.com See the file 'doc/COPYING' for copying permission===============================================================================What is BeEF? -------------__BeEF__ is short for __The Browser Exploitation Framework__. It is a penetration testing tool that focuses on the web browser.Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors. Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.Get Involved ------------You can get in touch with the BeEF team. Just check out the following:__Please, send us pull requests!____Web:__ https://beefproject.com/__Bugs:__ https://github.com/beefproject/beef/issues__Security Bugs:__ security@beefproject.com__Twitter:__ [@beefproject](https://twitter.com/beefproject)__Discord:__ https://discord.gg/25wT2P8pwxRequirements ------------* Operating System: Mac OSX 10.5.0 or higher / modern Linux. Note: Windows is not supported. * [Ruby](https://www.ruby-lang.org): 3.0 or newer * [SQLite](http://sqlite.org): 3.x * [Node.js](https://nodejs.org): 10 or newer * The gems listed in the Gemfile: https://github.com/beefproject/beef/blob/master/Gemfile * Selenium is required on OSX: `brew install selenium-server-standalone` (See https://github.com/shvets/selenium)Quick Start -----------__The following is for the impatient.__The `install` script installs the required operating system packages and all the prerequisite Ruby gems:$ ./install For full installation details, please refer to [INSTALL.txt](https://github.com/beefproject/beef/blob/master/INSTALL.txt) or the [Installation](https://github.com/beefproject/beef/wiki/Installation) page on the wiki.Upon successful installation, be sure to read the [Configuration](https://github.com/beefproject/beef/wiki/Configuration) page on the wiki for important details on configuring and securing BeEF.Documentation ---* [User Guide](https://github.com/beefproject/beef/wiki#user-guide) * [Frequently Asked Questions](https://github.com/beefproject/beef/wiki/FAQ) * [JSdocs](https://beefproject.github.io/beef/index.html)Usage -----To get started, simply execute beef and follow the instructions:$ ./beef {card-default label="? 工具信息" /} ? 项目地址：[https://github.com/beefproject/beef](https://github.com/beefproject/beef) ⭐ Star数：11003 ? 开发语言：JavaScript ? 项目描述：Browser Exploitation Framework项目 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/beefproject/beef/archive/refs/heads/master.zip"} {cloud type="default" title="网盘下载" url="https://github.com/beefproject/beef"}总的来说，**beef**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
wpscan - 安全从业者的得力助手 推荐一个实用的开源工具——wpscan。项目由wpscanteam开发维护，GitHub上获得了 9759 个Star。简单来说，它是一款WPScan WordPress安全扫描仪。专为安全专业人员和博客维护人员编写，以测试其WordPress网站的安全性。通过，对于站长和开发者来说是个不错的工具。 工具功能介绍 WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin Prerequisites- (Optional but highly recommended: rbenv) Ruby >= 3.3 - Recommended: latest stable Curl >= 7.72 - Recommended: latest stable The 7.29 has a segfault The {card-default label="? 工具信息" /} ? 项目地址：https://github.com/wpscanteam/wpscan ⭐ Star数：9759 ? 开发语言：Ruby ? 项目描述：WPScan WordPress安全扫描仪。专为安全专业人员和博客维护人员编写，以测试其WordPress网站的安全性。通过 {/card-default} {cloud type="default" title="网盘下载" url="https://github.com/wpscanteam/wpscan/archive/refs/heads/master.zip"} {cloud type="default" title="网盘下载" url="https://github.com/wpscanteam/wpscan"} 总的来说，wpscan是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
黑客必备工具：pwntools 详细介绍 推荐一个实用的开源工具——**pwntools**。项目由Gallopsled开发维护，GitHub上获得了 **13676** 个Star。简单来说，它是一款CTF框架和漏洞利用开发库，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍 Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. python from pwn import * context(arch = 'i386', os = 'linux')r = remote('exploitme.example.com', 31337) # EXPLOIT CODE GOES HERE r.send(asm(shellcraft.sh())) r.interactive() # Documentation Our documentation is available at [docs.pwntools.com](https://docs.pwntools.com/)A series of tutorials is also [available online](https://github.com/Gallopsled/pwntools-tutorial#readme)To get you started, we've provided some example solutions for past CTF challenges in our [write-ups repository](https://github.com/Gallopsled/pwntools-write-ups). # Installation Pwntools is best supported on 64-bit Ubuntu LTS releases (22.04 and 24.04). Most functionality should work on any Posix-like distribution (Debian, Arch, FreeBSD, OSX, etc.).Pwntools supports Python 3.10+ since version 5.0.0. Use Pwntools 4.x for older versions as well as Python 2.7. Most of the functionality of pwntools is self-contained and Python-only. You should be able to get running quickly with sh sudo apt-get update sudo apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev build-essential python3 -m pip install --upgrade pip python3 -m pip install --upgrade pwntools However, some of the features (assembling/disassembling foreign architectures) require non-Python dependencies. For more information, see the [complete installation instructions here](https://docs.pwntools.com/en/stable/install.html). # Contribution See [CONTRIBUTING.md](CONTRIBUTING.md) # Contact and Community If you have any questions not worthy of a [bug report](https://github.com/Gallopsled/pwntools/issues), join the Discord server at https://discord.gg/96VA2zvjCB {card-default label="? 工具信息" /} ? 项目地址：[https://github.com/Gallopsled/pwntools](https://github.com/Gallopsled/pwntools) ⭐ Star数：13676 ? 开发语言：Python ? 项目描述：CTF框架和漏洞利用开发库 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/Gallopsled/pwntools/archive/refs/heads/dev.zip"} {cloud type="default" title="网盘下载" url="https://github.com/Gallopsled/pwntools"}总的来说，**pwntools**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
分享一个不错的开源工具：osv-scanner 推荐一个实用的开源工具——**osv-scanner**。项目由google开发维护，GitHub上获得了 **10990** 个Star。简单来说，它是一款用Go编写的漏洞扫描程序，使用https://osv.dev提供的数据，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍 ---Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the [OSV database](https://osv.dev/) and CLI interface to [OSV-Scalibr](https://github.com/google/osv-scalibr) that connects a project’s list of dependencies with the vulnerabilities that affect them.OSV-Scanner supports a wide range of project types, package managers and features, including but not limited to:- **Languages:** C/C++, Dart, Elixir, Go, Java, Javascript, PHP, Python, R, Ruby, Rust. - **Package Managers:** npm, pip, yarn, maven, go modules, cargo, gem, composer, nuget and others. - **Operating Systems:** Detects vulnerabilities in OS packages on Linux systems. - **Containers:** Scans container s for vulnerabilities in their base s and included packages. - **Guided Remediation:** Provides recommendations for package version upgrades based on criteria such as dependency depth, minimum severity, fix strategy, and return on investment.OSV-Scanner uses the extensible [OSV-Scalibr](https://github.com/google/osv-scalibr) library under the hood to provide this functionality. If a language or package manager is not supported currently, please file a [feature request.](https://github.com/google/osv-scanner/issues)The underlying database, [OSV.dev](https://osv.dev/) has several benefits in comparison with closed source advisory databases and scanners:- Covering most open source language and OS ecosystems (including [Git](https://osv.dev/list?q=&ecosystem=GIT)), it’s comprehensive. - Each advisory comes from an open and authoritative source (e.g. [GitHub Security Advisories](https://github.com/github/advisory-database), [RustSec Advisory Database](https://github.com/rustsec/advisory-db), [Ubuntu security notices](https://github.com/canonical/ubuntu-security-notices/tree/main/osv)) - Anyone can suggest improvements to advisories, resulting in a very high quality database. - The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developer’s list of packagesThe above all results in accurate and actionable vulnerability notifications, which reduces the time needed to resolve them. Check out [OSV.dev](https://osv.dev/) for more details!## Basic installationTo install OSV-Scanner, please refer to the [installation section](https://google.github.io/osv-scanner/installation) of our documentation. OSV-Scanner releases can be found on the [releases page](https://github.com/google/osv-scanner/releases) of the GitHub repository. The recommended method is to download a prebuilt binary for your platform. Alternatively, you can use `go install github.com/google/osv-scanner/v2/cmd/osv-scanner@latest` to build it from source. ## Key FeaturesFor more information, please read our [detailed documentation](https://google.github.io/osv-scanner) to learn how to use OSV-Scanner. For detailed information about each feature, click their titles in this README.Please note: These are the instructions for the latest OSV-Scanner V2 beta. If you are using V1, checkout the V1 [README](https://github.com/google/osv-scanner-v1) and [documentation](https://google.github.io/osv-scanner-v1/) instead. ### [Scanning a source directory](https://google.github.io/osv-scanner/usage) bash $ osv-scanner scan source -r /path/to/your/dir This command will recursively scan the specified directory for any supported package files, such as `package.json`, `go.mod`, `pom.xml`, etc. and output any discovered vulnerabilities.OSV-Scanner has the option of using call analysis to determine if a vulnerable function is actually being used in the project, resulting in fewer false positives, and actionable alerts.OSV-Scanner can also detect vendored C/C++ code for vulnerability scanning. See [here](https://google.github.io/osv-scanner/usage/#cc-scanning) for details. #### Supported LockfilesOSV-Scanner supports 11+ language ecosystems and 19+ lockfile types. To check if your ecosystem is covered, please check out our [detailed documentation](https://google.github.io/osv-scanner/supported-languages-and-lockfiles/#supported-lockfiles). ### [Container Scanning](https://google.github.io/osv-scanner/usage/scan-)OSV-Scanner also supports comprehensive, layer-aware scanning for container s to detect vulnerabilities in the following operating system packages and language-specific dependencies.| Distro Support | Language Artifacts Support | | -------------- | -------------------------- | | Alpine OS | Go | | Debian | Java | | Ubuntu | Node | | | Python |See the [full documentation](https://google.github.io/osv-scanner/supported-languages-and-lockfiles/#supported-artifacts) for details on support.**Usage**: bash $ osv-scanner scan my--name:tag  ### [License Scanning](https://google.github.io/osv-scanner/usage/license-scanning/)Check your dependencies' licenses using deps.dev data. For a summary: bash osv-scanner --licenses path/to/repository To check against an allowed license list (SPDX format): bash osv-scanner --licenses="MIT,Apache-2.0" path/to/directory ### [Offline Scanning](https://google.github.io/osv-scanner/usage/offline-mode/)Scan your project against a local OSV database. No network connection is required after the initial database download. The database can also be manually downloaded. bash osv-scanner --offline --download-offline-databases ./path/to/your/dir ### [Guided Remediation](https://google.github.io/osv-scanner/experimental/guided-remediation/) (Experimental)> [!WARNING] > Guided remediation (the `fix` command) can be risky when run on untrusted projects. It may trigger the package manager to execute scripts or follow external registries specified in the project. Please ensure you trust the source code and artifacts before proceeding.OSV-Scanner provides guided remediation, a feature that suggests package version upgrades based on criteria such as dependency depth, minimum severity, fix strategy, and return on investment. We currently support remediating vulnerabilities in the following files:| Ecosystem | File Format (Type) | Supported Remediation Strategies | | :-------- | :----------------------------- | :--------------------------------------------------------------------------------------------------------------------- | | npm | `package-lock.json` (lockfile) | [`in-place`](https://google.github.io/osv-scanner/experimental/guided-remediation/#in-place-lockfile-changes) | | npm | `package.json` (manifest) | [`relock`](https://google.github.io/osv-scanner/experimental/guided-remediation/#relock-and-relax-direct-dependencies) | | Maven | `pom.xml` (manifest) | [`override`](https://google.github.io/osv-scanner/experimental/guided-remediation/#override-dependency-versions) |This is available as a headless CLI command, as well as an interactive mode.#### Example (for npm) bash $ osv-scanner fix \ --max-depth=3 \ --min-severity=5 \ --ignore-dev \ --strategy=in-place \ -L path/to/package-lock.json #### Interactive mode (for npm) bash $ osv-scanner fix \ -M path/to/package.json \ -L path/to/package-lock.json ## Data Sources and PrivacyOSV-Scanner communicates with the following external services during operation: ### [OSV.dev API](https://osv.dev/)The primary data source for vulnerability information. OSV-Scanner queries this API to check packages for known vulnerabilities and to identify vendored C/C++ dependencies. Data sent includes package names, versions, ecosystems, and file hashes. Use [`--offline` mode](https://google.github.io/osv-scanner/usage/offline-mode/) to disable network requests and scan against a local database instead. ### [deps.dev API](https://docs.deps.dev/api/)Used for supplementary package information:- **Dependency resolution**: Resolves dependency graphs for vulnerability scanning and remediation - **Container scanning**: Queries container metadata for vulnerability detection - **License scanning** (`--licenses` flag): Retrieves license information for packages - **Package deprecation**: Checks if packages are deprecatedData sent includes package names, versions, and ecosystems. No source code is transmitted.### Package RegistriesWhen using native registry for dependency resolution (instead of deps.dev), OSV-Scanner may query:| Registry | URL | Used For | | ------------- | ------------------------------ | ------------------------------------ | | Maven Central | `repo.maven.apache.org/maven2` | Maven package metadata and POM files | | npm Registry | `registry.npmjs.org` | npm package metadata | | PyPI | `pypi.org` | Python package metadata |## Contribute ### Report ProblemsIf you have what looks like a bug, please use the [GitHub issue tracking system](https://github.com/google/osv-scanner/issues). Before you file an issue, please search existing issues to see if your issue is already covered. ### Contributing code to `osv-scanner`See [CONTRIBUTING.md](CONTRIBUTING.md) for documentation on how to contribute code. ## Star History {card-default label="? 工具信息" /} ? 项目地址：[https://github.com/google/osv-scanner](https://github.com/google/osv-scanner) ⭐ Star数：10990 ? 开发语言：Go ? 项目描述：用Go编写的漏洞扫描程序，使用https://osv.dev提供的数据 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/google/osv-scanner/archive/refs/heads/main.zip"} {cloud type="default" title="网盘下载" url="https://github.com/google/osv-scanner"}总的来说，**osv-scanner**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
GhostTrack - 一款值得收藏的神器 推荐一个实用的开源工具——**GhostTrack**。项目由HunxByts开发维护，GitHub上获得了 **15019** 个Star。简单来说，它是一款跟踪位置或，对于站长和开发者来说是个不错的工具。 # # 工具功能介绍 Useful tool to track location or mobile number, so this tool can be called osint or also information gatheringNew update : Version 2.2 ### Instalation on Linux (deb) sudo apt-get install git sudo apt-get install python3 ### Instalation on Termux pkg install git pkg install python3 ### Usage Tool git clone https://github.com/HunxByts/GhostTrack.git cd GhostTrack pip3 install -r requirements.txt python3 GhostTR.py Display on the menu IP Tracker on the IP Track menu, you can combo with the seeker tool to get the target IP :zap: Install Seeker : - Get Seeker Display on the menu Phone Tracker on this menu you can search for information from the target phone numberDisplay on the menu Username Tracker on this menu you can search for information from the target username on social media :zap: Author : - HunxByts{card-default label="? 工具信息" /} ? 项目地址：[https://github.com/HunxByts/GhostTrack](https://github.com/HunxByts/GhostTrack) ⭐ Star数：15019 ? 开发语言：Python ? 项目描述：跟踪位置或 {/card-default}{cloud type="default" title="网盘下载" url="https://github.com/HunxByts/GhostTrack/archive/refs/heads/main.zip"} {cloud type="default" title="网盘下载" url="https://github.com/HunxByts/GhostTrack"}总的来说，**GhostTrack**是一个功能比较实用的开源工具，适合日常工作和学习使用。如果你正在寻找一款相关工具，不妨下载试试。使用前建议仔细阅读项目文档。
-
安卓酷狗音乐v10.5.5会员版 软件介绍 酷狗音乐手机版，音效品质专业、音乐社交新颖，首次以"听、看、唱" 共同呈现。酷我音乐Android版提供专业蝰蛇音效、听歌识曲悬浮球、音乐短功能。最新去广告版，解锁了VIP蝰蛇音效HiFi现场。 软件安卓酷狗音乐v10.5.5会员版 图片3 版本特点 by 蓝色飞扬 1、解锁HIFI音效 2、解锁会员皮肤 3、解锁下载加速 4、去启动广告 5、去更新检测 6、点亮SVIP免费图标（仅为好看） 7、精简主界面：去直播和K歌Tab 8、精简我的页面：去推广和意见反馈 9、精简侧栏 10、去Root设备提醒 11、去热搜及横幅广告 12、去卸载反馈 by 唯美小奇 解锁蝰蛇HiFi现场音效 解锁会员主题皮肤免费用 去启动广告、去广告推送 去更新检测，可用QQ登录 ⬇️ 下载地址 {cloud type="tianyi" title="天翼云盘" url="https://cloud.189.cn/t/n6BviqQbaUZb"} 下载后请先检查文件完整性，如有问题请在评论区反馈
-
PDF 专业电子签章工具 v5.2 软件介绍 本工具适合需要给PDF文件添加签章或骑缝章的用户，特别是需要高质量输出的专业场景 软件PDF 专业电子签章工具 v5.2 图片3 主要功能特点 1. PDF文件处理 支持加载和预览PDF文件 显示总页数和当前页码 支持页面导航（上一页/下一页/跳转到指定页） 支持缩放控制（适应窗口、50%-400%多级缩放） 2. 签章功能 普通签章模式：在PDF页面上添加自定义签章 骑缝章模式：将签章分割应用到多页PDF边缘 支持右侧、左侧、顶部、底部四种位置 可设置首页宽度和其他页宽度 可调整重叠部分大小 支持签章位置拖动调整 支持鼠标滚轮缩放签章 支持Shift+滚轮旋转签章 3. 签章参数设置 签章直径：可调整签章大小（厘米） 旋转角度：0-360度精确旋转 透明度设置：10%-100%多级透明度 图层位置： 置于文字上方（支持透明度） 置于文字下方（强制100%不透明） 注：扫描图像PDF不支持置于文字下方 4. 模板功能 保存模板：将当前页签章设置保存为JSON模板文件 加载模板：从模板文件恢复签章设置 模板包含完整的位置、缩放、旋转、透明度等信息 5. 批量操作 应用到所有页面：将当前页签章设置应用到所有页面 签章偏移度设置：为多页PDF应用随机偏移，避免签章位置完全一致 可设置X/Y方向偏移范围 可设置旋转偏移范围 6. 输出功能 导出为PDF：生成带签章的PDF文件 导出为图片：生成JPG格式图片文件（每页一张） 固定输出分辨率：300 DPI高质量输出 7. 磁盘缓存管理 智能缓存系统：使用磁盘缓存处理大型文件 缓存目录管理： 可更改缓存目录位置 禁止设置为桌面目录（安全保护） 可清空缓存 磁盘空间检查：导出前自动检查可用空间 8. 高级特性 自动类型检测：自动识别矢量PDF和扫描图像PDF 优化内存使用：流式处理大文件，避免内存不足 支持矢量PDF直接嵌入：对矢量PDF使用更高效的处理方式 错误处理：完善的错误提示和恢复机制 操作流程基本操作步骤： 选择PDF文件 → 点击"选择PDF文件"按钮 选择签章图片 → 点击"选择签章图片"按钮（支持PNG/JPG/JPEG/BMP格式） 调整签章： 拖动：调整位置 滚轮：缩放大小 Shift+滚轮：旋转 参数设置：调整直径、透明度、旋转角度等 保存设置 → 点击"保存当前页签章设置" 应用到其他页 → 点击"应用到所有页面"（可选） 导出文件 → 点击"导出为PDF"或"导出为图片" 骑缝章模式操作： 勾选"骑缝章模式" 选择骑缝章图片 设置位置（右侧/左侧/顶部/底部） 调整首页宽度和其他页宽度 设置重叠部分大小 拖动整体调整位置（所有页同步移动） 模板操作： 保存模板：调整好签章后点击"保存模板" 加载模板：点击"加载模板"选择之前保存的模板文件 缓存管理： 更改缓存目录：点击"更改目录"选择新的缓存位置 清空缓存：点击"清空缓存"释放磁盘空间 界面布局左侧功能区（1/3宽度）： PDF文件操作区 - 文件选择和页面导航 签章操作区 - 签章选择和参数设置 签章偏移度设置区 - 批量应用的随机偏移 输出设置区 - 导出和缓存管理 ⬇️ 下载地址 {cloud type="tianyi" title="天翼云盘" url="https://cloud.189.cn/t/FRFzMjRNneQf（访问码：9wth）"} 下载后请先检查文件完整性，如有问题请在评论区反馈
-
照片批量重命名QphotoRenamer v2.3绿色版 软件介绍 QphotoRenamer 是一款专为摄影爱好者和海量照片管理者设计的批量重命名工具，支持根据文件的拍摄日期、修改日期或创建日期快速重命名。无论是照片还是，它都能帮你轻松整理，让文件管理变得简单高效。 软件照片批量重命名QphotoRenamer v2.3绿色版 图片5 软件特点 拖放支持：支持直接从文件管理器拖拽文件或文件夹到程序界面。 多格式兼容：处理常见图片格式（JPG、PNG、HEIC等）和文件（MOV、MP4、AVI等）。 EXIF 数据利用：自动读取照片拍摄信息（相机型号、镜头、ISO、光圈等）用于重命名。 自定义命名模板：高度自定义重命名格式，支持多种日期及变量组合。 高效批处理：优化的多线程处理，支持“快速添加模式”以应对海量文件。 智能冲突处理：自动处理重名文件，支持添加后缀或保留原文件名。 持久化配置：所有的自定义设置与模板均保存至配置文件，重启后自动加载。 ⬇️ 下载地址 {cloud type="tianyi" title="天翼云盘" url="https://cloud.189.cn/t/zmauEjzaMJN3（访问码：th5u）"} 下载后请先检查文件完整性，如有问题请在评论区反馈
