flash1201 Goto Github PK

.github

GitHub community files for Craft CMS

ailoginblasting

基于机器学习的登录验证码爆破工具

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bug

bugcrowd_university

Open source education content for the researcher community

chunked-coding-converter

Burp suite 分块传输辅助插件

cms

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond.

codeanalysis

Static Code Analysis

cve

Gather and update all available and newest CVEs with their PoC.

evilzip

evilzip lets you create a zip file(with password) that contains files with directory traversal characters in their embedded path.

flash1201.github.io

HEXO

home

关于国内的SB，我表示他们缺少脑子，我要逃出国内，我认为美国的空气是香甜的！

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了十种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

java-rce-echo

Java RCE 回显测试代码

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

jce

JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

junxun

军训考勤网站，并自动生成学院考勤表

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

linuxexploitation

CTFs and solutions for Linux binary exploitation.

log4shell

Operational information regarding the log4shell vulnerabilities in the Log4j logging library.

memoryshell

内存马学习

memshellcode

分享几个直接可用的内存马，记录一下学习过程中看过的文章

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

open-redirect

ceshi

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

sangfor

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

shuize_0x727

信息收集自动化工具

svg_xss

Defending against XSS in SVG files