blockchainguard Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

20190511_awd_docker

2019 年 5 月 11 日防灾科技学院 “应急挑战杯” 大学生网络安全邀请赛 AWD 靶机题目。

2020vulnerabilityattack-defense

2020攻防演练弹药库

3dclock

3D立方体时钟

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

activescanplusplus

ActiveScan++ Burp Suite Plugin

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

acunetix-linux

acunetix-linux

adult

aes-killer

Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly

airdos

💣 Remotely render any nearby iPhone or iPad unusable

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

allscanner

数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

amancabin

analog

一款基于机器学习的Web日志统计分析与异常检测命令行工具

android-getapkinfo

获取Android应用基本信息的工具集

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

android-security-awesome

A collection of android security related resources

android_app_security_checklist

Android App Security Checklist

android_code_arbiter

针对Android Studio的源码扫描工具

androidchecklist

Android应用审计checklist整理

androidtools

angryfuzzer

Tools for information gathering

anyproxy

A fully configurable http/https proxy in NodeJS

api_wordlist

A wordlist of API names for web application assessments

app_security

apt-guide

APT学习指南（Advanced persistent threat learning Guide）

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

arpy

Mac OSX ARP spoof (MiTM) tool that can also plug into Gource