sityck Goto Github PK

actuatorexploit

SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE

awesome-hacking-lists

平常看到好的渗透hacking工具和多领域效率工具的集合

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

data-analysis-1

资料分享

devportal-tutorials-js

Tutorials for the Developer Portal / 实现了与私有节点通信的前端页面

dsteem

Steem blockchain RPC client / 替代steem-js的前端调用函数库，已针对私有程序进行修改

ehole-1

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

function_js_paper

本仓库实现了jsonRPC的通信以及简单前端页面的API调用过滤

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

generatejenkinsexploit

golangbypassav

研究利用golang各种姿势bypassAV

netspy

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

notes

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

redoshunter

ReDoSHunter: A Combined Static and Dynamic Approach for Regular Expression DoS Detection

redosscantool

Redos漏洞代码扫描器（基于RegexStaticAnalysis）

regexstaticanalysis

A tool to perform static analysis on regexes to determine whether they are vulnerable to ReDoS.

relic

Code

shadowsocks-go

go port of shadowsocks

shadowsocks-windows

If you want to keep a secret, you must also hide it from yourself.

sityck.github.io

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

springboot-scan

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

steem-js

本仓库为与后台节点通信的前端JS库，不建议使用，已停止更新

steem_paper

custom_steem / 私有Steem节点程序

theharvester

E-mails, subdomains and names Harvester - OSINT

veinmind-tools

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集