lycansfree Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

axis2shell

b374k

PHP Webshell with handy features

benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

ctf-web-challenges

cve-2018-2628

cve-2018-2629

elasticsearchexp

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

free-security-ebooks

Free Security and Hacking eBooks

free-tech-ebooks-from-packtpub

A collection of free ebooks from Packt Publishing [Regularly Updated]

googlesearchcrawler

a tool for crawl Google search results

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

nagascan

NagaScan is a distributed passive scanner for Web application.

onlinetools

在线cms识别|旁站|c段|信息泄露|工控|系统|物联网安全|cms漏洞扫描|端口扫描|待续..

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

phpcodz

Php Codz Hacking

redalert

原型版本

s2-057

S2-057 EXP

scan_webshell

很简单的webshell扫描

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

scripts.repo

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shadowbroker

src_domain_port

src域名端口信息

st2-057

St2-057 Poc Example

struts2_check

一个用于识别目标网站是否采用Struts2框架开发的工具demo