7hang Goto Github PK

-

内网渗透

--java

代码审计知识点整理-Java

--php

代码审计知识点整理-php

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

2019mst-opensourcelists

米斯特2019年开源项目清单

address

aliyun-accesskey-tools

阿里云accesskey利用工具

android-ios-security

移动安全

anti-honeypot

一款可以检测WEB蜜罐并阻断请求的Chrome插件

autorepeater

Automated HTTP Request Repeating With Burp Suite

awesome-opensource-security

A list of interesting stuffs that I have no time to test/review

blog

整理笔记

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bscan

bug-bounty

Ressources for bug bounty hunting

burpcollector

通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

bypass-

...Webshell

captcha-killer

burp验证码识别接口调用插件

captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

crawlergo-to-xray

crawlergo-to-xray，可以把0Kee-Team crawlergo爬虫爬取的链接推送给长亭xray分析，xray分析后自动调用webhook接口利用server酱实时推送漏洞预警到微信，让你躺着挖漏洞。支持多线程。

cyber-security-interview

...

dirtycow

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

facebook-bug-bounties

Hacking Facebook for fun and profit: It’s not that hard, apparently (exclusive)

fastjsonscan

fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。

ffuf

Fast web fuzzer written in Go