xvchengnuo Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

1010class

1010课程脑图

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

cmsprint

CMS和中间件指纹库

container-escape-check

docker container escape check || Docker 容器逃逸检测

ctf-tools

Some setup scripts for security research tools.

ctftools

Personal CTF Toolkit

ctftraining

CTF Training 经典赛题复现环境

dev-sidecar

开发者边车，github打不开，github加速，git clone加速，git release下载加速，stackoverflow加速

directory-scanning

fiora

Fiora：漏洞PoC框架的图形版，快捷搜索PoC、一键运行Nuclei

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gin-vue-admin

基于vite+vue3+gin搭建的开发基础平台（已完成setup语法糖版本），集成jwt鉴权，权限管理，动态路由，显隐可控组件，分页封装，多点登录拦截，资源权限，上传下载，代码生成器，表单生成器等开发必备功能。

gobyextension

Goby extension doc.

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

ics-windows

linux-command

Linux命令大全搜索工具，内容包含Linux命令手册、详解、学习、搜集。https://git.io/linux

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

lrxa

memshell

a webshell resides in the memory of java web server

mysql_gopher_attack

netch

A simple proxy client

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penkitgui

渗透测试武器库

pentest-note

渗透测试☞经验/思路/想法/总结/笔记

pentest_study

从零开始内网渗透学习

plugins

Joplin official plugin repository. For issues, please use https://github.com/laurent22/joplin/issues

snowshadow

雪影，一款桌面软件，集成了IP查询，端口扫描，系统命令，Webshell，C段存活扫描，后台目录扫描，远程控制等功能，以后还会增加其它实用功能。

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool