idaking Goto Github PK

redteam

RedTeam资料收集整理

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

spring-boot-upload-file-lead-to-rce-tricks

spring boot Fat Jar 应用文件上传漏洞到 RCE 的利用技巧

springbootdemo

Spring Boot学习系列

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

superwordlist

基于实战沉淀下的各种弱口令字典

top10webseclist

Top Ten Web Hacking Techniques List

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

web-security-learning

Web-Security-Learning

weblogicenvironment

Weblogic环境搭建工具

whoami

xray-crack

xray社区高级版证书生成，支持到 1.2.0 版本

zhouyu

（周瑜）Java - SpringBoot 持久化 WebShell 学习demo（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）