webshell520 Goto Github PK

best-chinese-front-end-blogs

收集优质的中文前端博客

betterdefaultpasslist

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

bigdataaudit

The security vulns detector for Hadoop and Spark（大数据安全检测工具）

biu

网络资产发现、漏洞扫描

biu-framework

Biu-framework🚀 Security Scan Framework For Enterprise Intranet Based Services(企业内网基础服务安全扫描框架)

bkscanner

BkScanner 分布式、插件化web漏洞扫描器

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

blasting_dictionary

爆破字典

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

blind-xxe

A basis for a Blind-Based XXE Exploitation Framework

blindy

Simple script to automate brutforcing blind sql injection vulnerabilities

blisqy

Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

blog_backup

A repository with various tutorials on how to do things in Pentesting, setup environments and other things

bodgeit

The BodgeIt Store is a vulnerable web application which is currently aimed at people who are new to pen testing.

book

学习笔记

book-1

Meta-data and Makefile needed to build the book. Main starting point.

bookmarks

all things awesome security

brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications

brosec

Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.

browser-backdoor

BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener

browser_vuln_check

browser_vuln_check ,利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等(browser_vuln_check framework using some known browser vulnerabilities PoC to quick automate aduit WebView or Browser security ,apply to application security before issue and detecting third-part WebView security)..

browserrecon-php

Advanced Web Browser Fingerprinting

browspy

浏览器用户全部信息收集js

brutescrape

A web scraper for generating password files based on plain text found

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference

burp-cookie-porter

一个可快速“搬运”cookie的Burp Suite插件