github-yxl Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

auto-earn

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

awesome-redteam

一个红队知识仓库

break

业务风险枚举与规避知识（Business Risk Enumeration & Avoidance Kownledge）

burploaderkeygen

Burp Suite Pro Loader & Keygen ( BurpSuite version v2020.1 - ∞ )

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

dirsearch

Web path scanner

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

exp-hub

漏洞复现、批量脚本

eyejo

EyeJo是一款自动化资产风险评估平台，可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查，快速发现存在的薄弱点和攻击面。

findsomething

基于chrome、firefox插件的被动式信息泄漏检测工具

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

goproxy

🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

jndiexploit

A malicious LDAP server for JNDI injection attacks

linux-incident-response-cookbook

Linux 应急响应手册

massdns

mindapi

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

nosafer.github.io

在线漏洞平台

olist213_information_security_books

150本信息安全方面的书籍书籍（持续更新）

onedragon

OneDragon 安全圈一条龙服务，全自动化挖洞，助力挖SRC的赏金猎人白帽子，一键实现子域名扫描，全端口扫描，目录扫描，漏洞扫描。

oneforall

OneForAll是一款功能强大的子域收集工具

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2022

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

secguide

面向开发人员梳理的代码安全指南

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiro-exploit

Shiro反序列化利用工具，支持key爆破，配合ysoserial，生成回显Payload