harmoc Goto Github PK

rmi-jndi-ldap-jrmp-jmx-jms

rmi、jndi、ldap、jrmp、jmx、jms一些demo测试

scanners-box

The toolbox of open source scanners(abbr - scanbox) - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

soter

A secure and quick biometric authentication standard and platform in Android held by Tencent.

struts2-057-exp

s2-057 最新漏洞分析和EXP脚本

upload-labs

一个帮你总结所有类型的上传漏洞的靶场

venom

Venom - A Multi-hop Proxy for Penetration Testers

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulncode-db

Vulncode-DB project

vulnerability-analysis

Vulnerability-analysis Poc、python shell

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

wapiti

A web-application vulnerability scanner

winterwind

My first GitHub project.So~我用我最喜欢的钢琴曲名来命名

wooyun_drops_1000php_-

wooyun_drops_1000php_代码审计

wooyundrops

Wooyun知识库，乌云知识库，https://wooyun.kieran.top

wtfpython

A collection of surprising Python snippets and lesser-known features.

xss.png

A XSS mind map ;)

xsscrapy

XSS spider - 66/66 wavsep XSS detected

xsser

From XSS to RCE 2.5 - Black Hat Europe Arsenal 2016

xssfork

xssprobe

xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.

xssscaner

Xss Scaner

xsstracer

A small python script to check for Cross-Site Tracing (XST)

xsstrike

XSStrike is a program which can crawl, fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.