laowang1026 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

0range-x.github.io

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021_hvv

2021 hw

2022-hw-poc

2022 护网行动 POC 整理

2e9740be.github.io

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

403fuzzer

Fuzz 403/401ing endpoints for bypasses

aaaa

about-attack

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-pentest-notes

个人域渗透学习笔记

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

ad_pentest

红队|域渗透重要漏洞汇总(持续更新)

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

alipaytinyappcrack

破解支付宝小程序ssl验证，实现代理抓包

aliyun-openapi-php-sdk

Open API SDK for php developers

allaboutbugbounty

Step by step how to find bug in website

alterx

Fast and customizable subdomain wordlist generator using DSL

android-vulnerability-mining

Android APP漏洞之战系列，主要讲述如何快速挖掘APP漏洞

androidchecklist

Android应用审计checklist整理

androidkiller4j

Java版的AndroidKiller

antihoneypot-chrome-simple

Chrome 蜜罐检测插件

apache-tomcat-mongodb-remote-code-execution

Apache Tomcat + MongoDB Remote Code Execution

apereo-cas-attack

WIP: Demo for Attacking Apereo CAS

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apisix

The Cloud-Native API Gateway

apkanalyser

一键提取安卓应用中可能存在的敏感信息。

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。