xsr7yer Goto Github PK

a-programmers-guide-to-english

专为程序员编写的英语学习指南 v1.2。在线版本请点 ->

airbug

Airbug(空气洞)，收集漏洞poc以及详情用于学习。

anyproxy

A fully configurable http/https proxy in NodeJS

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-hacking-lists

hacking tools awesome lists

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

blasting_dictionary

爆破字典

book

MyBatis 从入门到精通

books

bufferfly

渗透测试资产处理框架，对渗透测试前的信息搜集到的大批量资产进行处理

burpcollaboratordnstunnel

A DNS tunnel utilizing the Burp Collaborator

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

burplugin-java-rce

******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python类库 如果初始化失败请按照如下步骤安装类库， 1、执行 $[python]/Scrips/easy_install pip 2、requests模块 安装方法 pip install requests 3、termcolor模块安装方法： pip install termcolor github: https://github.com/bigsizeme/java-rce-tools burpsuite源码地址：https://github.com/bigsizeme/burplugin-java-rce

burpplugins

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件、汉化等相关教程，欢迎添砖加瓦

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

checksql

chunked-coding-converter

Burp suite 分块传输辅助插件

cobalt_strike_wiki

Cobalt Strike系列

collection-document

Collection of quality safety articles

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

conemu

Customizable Windows terminal with tabs, splits, quake-style, hotkeys and more

ctf-all-in-one

CTF竞赛入门指南

discoversubdomain

前渗透信息探测工具集-子域名

domain_hunter

A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件

dsvw

Damn Small Vulnerable Web

ebooks-java

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exploit

f-nascan

Scanning a network asset information script