a0xpg Goto Github PK

0day-security-software-vulnerability-analysis-technology

0day安全_软件漏洞分析技术

12306

12306智能刷票，订票

a0xpg.github.io

My website

aaa

airachnid-burp-extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amass

In-depth Attack Surface Mapping and Asset Discovery

anju

antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

app-env-docker

基于 Docker 的真实应用测试环境

aquatone

A Tool for Domain Flyovers

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-cyber-security

[Moved to: https://github.com/alphaSeclab/awesome-cyber-security ][Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bridge

无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpextend

基于Burp插件开发打造渗透测试自动化

burpsentinel

GUI Burp Plugin to ease discovering of security holes in web applications

burpsuiteloggerplusplus

Burp Suite Logger++: Log activities of all the tools in Burp Suite

c1h2e1.github.io

chybeta.github.io

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

collaboratorplusplus

cve-2018-17182

Linux 内核VMA-UAF 提权漏洞（CVE-2018-17182）,0day