sunskyyao Goto Github PK

aho-corasick

A-C implementation in "C". Tight-packed (interleaved) state-transition matrix -- as fast as it gets, as small as it gets.

ajax-hook

:trident: Intercepting browser's AJAX requests which made by XMLHttpRequest.

coding-interview-university

A complete computer science study plan to become a software engineer.

copenapi

parser and cmdline tool for openapi spec

coreruleset

OWASP ModSecurity Core Rule Set (Official Repository)

gperftools

Main gperftools repository

hyperscan

A high-performance regular expression matching library

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

lighttpd1.4

lighttpd1.4 on github for easier collaboration - main repo still on lighttpd.net

linux-kernel-illustrated

Illustrate linux kernel with diagrams

log4jrce

memleax

debugs memory leak of running process. Not maintained anymore, try `libleak` please.

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

openapi-specification

The OpenAPI Specification Repository

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

qingscan

一个漏洞扫描器粘合剂；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

upload-labs

一个想帮你总结所有类型的上传漏洞的靶场

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

webshell

Webshell && Backdoor Collection

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

xss-labs

xss 跨站漏洞平台

yargen

yarGen is a generator for YARA rules