x311 Goto Github PK

micro8

moby

Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

mutillidae

OWASP Mutillidae II is a free, open source, deliberately vulnerable web-application providing a target for web-security enthusiast. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software.

mydict

密码字典

mypersonaltest

mypersonaltest

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

passworddic

2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典

penetration_interview_questions

渗透测试面试题

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_tools

收集一些小型实用的工具

pentestnote

个人输出，经验/思路/想法/总结/笔记/. . .

python-hacker-code

《python黑帽子：黑客与渗透测试编程之道》代码及实验文件，字典等

red_team_tool_countermeasures

redteaming2020

RedTeaming知识星球2020年安全知识汇总

ruankao_itpm

软考-信息系统项目管理师（高项）/2021年05月备考资料

ruankao_itpm_guide

 软考-信息系统项目管理师考试指南

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

safeline-open-platform

saidict

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securityinterviewguide

网络信息安全从业者面试指南（持续补充各公司招聘面试题目和侧重点）

shadowbroker

The Shadow Brokers "Lost In Translation" leak

superwordlist

基于实战沉淀下的各种弱口令字典

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulscan

Advanced vulnerability scanning with Nmap NSE

vulstudy

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。

wdscanner

WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署、密码定向破解、社工库查询等功能。

weak-password

字典大全 dictionary