shang159 Goto Github PK

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

public_scan_tools

pype32

Yet another Python library to read and write PE/PE+ files.

python-scraping

Code samples from the book Web Scraping with Python http://shop.oreilly.com/product/0636920034391.do

rootkits-list-download

This is the list of all rootkits found so far on github and othersites.

ropgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.

rules

Repository of yara rules

saidict

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

sark

IDAPython Made Easy

sec-chart

安全思维导图集合

secist_script

更新优化Demon的Metasploit Payload

shadowbroker

The Shadow Brokers "Lost In Translation" leak

simple-java-maven-app

For an introductory tutorial on how to use Jenkins to build a simple Java application with Maven.

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

ssh

struts2-scan

Struts2全漏洞扫描利用工具

ttlscan

一款简易的插件化的漏洞扫描器框架

twctf-2016-problems

vue-learn

vue code

vxscan

python3写的综合扫描工具，主要用来敏感文件探测(目录扫描与js泄露接口)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，弱口令探测，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

webdirscan

跨平台的web目录扫描工具

webshell-sniper

Manage your website via terminal

websiteoutlook

🍅冲出你的窗口，free ss/ssr/vmess分享、IPFS、暗网及蹭网教程、Git镜像等其他资源存储库

write-ups-2017

Wiki-like CTF write-ups repository, maintained by the community. 2017

writeups

Wiki-like CTF write-ups repository by ByteBandits

x64dbg

An open-source x64/x32 debugger for windows.

yara

The pattern matching swiss knife