hjk201960 Goto Github PK

--java

代码审计知识点整理-Java

0v3rr1d3.github.io

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本，用于节省红队人员工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

3os.org

Collocation of technical documentation and guides for devops, developers, pentesters, systems administrators and other IT professionals website

amp-research

Research on UDP/TCP amplification vectors, payloads and mitigations against their use in DDoS Attacks

android-exploits

A collection of android Exploits and Hacks

android-learning-resources

Android学习资源网站索引大全

aptnotes

Various public documents, whitepapers and articles about APT campaigns

ary

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

auto-root-exploit

Auto Root Exploit Tool

autosploit

Automated Mass Exploiter

awesome-awesomeness

A curated list of awesome awesomeness

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-python

A curated list of awesome Python frameworks, libraries, software and resources

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awesomexss

Awesome XSS stuff

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bbscan

A vulnerability scanner focus on scanning large number of targets in short time with a minimal set of rules.

beef

The Browser Exploitation Framework Project

blasting_dictionary

爆破字典

bloodhound

Six Degrees of Domain Admin

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

bug-hunting-101

burpextend

基于Burp插件开发打造渗透测试自动化

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦