615 Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

615.github.io

android-training-course-in-chinese

Android官方培训课程中文版

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

awesome-python-cn

Python资源大全中文版，包括：Web框架、网络爬虫、模板引擎、数据库、数据可视化、图片处理等，由伯乐在线持续更新。

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

behinder

“冰蝎”动态二进制加密网站管理客户端

braintools

A collection of tools for Brainfuck and derivatives

cms_vuln

vuln

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cnvd-c-2019-48814

WebLogic wls9-async反序列化远程命令执行漏洞

cobaltstrike

CobaltStrike's source code

code-audit-challenges

Code-Audit-Challenges

exp

收集各种各样的exp

fofa

fofa website

isf

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

micro8

payloads

Git All the Payloads! A collection of web attack payloads.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest_tools

收集一些小型实用的工具

python_backdoor

过360主动防御360杀毒以前99%杀软的python后门

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

sec-box

information security Tools Box （信息安全工具集合）

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security_circle_2017

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)