tlcyqj2023 Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

activate-power-mode

Activate POWER MODE anywhere

active-directory-pentest-notes

个人域渗透学习笔记

altman

the cross platform webshell tool in .NET

anti-anti-spider

越来越多的网站具有反爬虫特性，有的用图片隐藏关键数据，有的使用反人类的验证码，建立反反爬虫的代码仓库，通过与不同特性的网站做斗争（无恶意）提高技术。（欢迎提交难以采集的网站）（因工作原因，项目暂停）

antsword

AntSword is a cross-platform website management toolkit.

antsword-jsp-template

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

awesome-webshell

Awesome webshell collection. Including 150 Github repo, and 200+ blog posts.

behinder_source

Behinder3.0 Beta4 源码（Decompile and Fixed）

better-cloudflare-ip

查找适合自己当前网络环境的优选cloudflare anycast IP

blasting_dictionary

爆破字典

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

burpfakeip

服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

cas_exp

CAS 硬编码 远程代码执行漏洞

ceshi

ceshi仓库

cknifemodifyversion

基于Cknife的基础进行小幅度修改

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cool

Golang-Gin 框架写的免杀平台，内置分离、捆绑等多种BypassAV方式。

coreldraw

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

ctf_hacker-tools

CTF-渗透测试~工具合集

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

deploy

Pandora Cloud + Pandora Server + Shared Chat + BackendAPI Proxy + Chat2API + Signup Free = PandoraNext. New GPTs(Gizmo) UI, All in one!

dorabox

DoraBox - 基础Web漏洞训练靶场 - 【本项目“原创”作者：知鸟堂】

foureye

AV Evasion Tool For Red Team Ops

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzing-dicts

Web Security Dictionary