morysummer Goto Github PK

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

awesome-poc

一个各类漏洞POC知识库

awesome-redteam

一个红队知识仓库

awesome-waf

🔥 Web-application firewalls (WAFs) from security standpoint.

cms_of_php

cobaltstrike

CobaltStrike资源大全

developmenttools

开发工具

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hackerone-reports

Top disclosed reports from HackerOne

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

knowledge-base

Knowledge Base 慢雾安全团队知识库

observerward

Cross platform community web fingerprint identification tool

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

secbooks

安全类各家文库大乱斗

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

vulnerability-paper

收集的文章 https://mrwq.github.io/vulnerability-paper/

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合