caidao-official-version

**菜刀官方版本，拒绝黑吃黑，来路清晰

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

feigong

天下皆白,唯我独黑,非攻墨门,兼爱平生

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hello-java-sec

☕️ Java Security，安全编码和代码审计

jndi

JNDI 注入利用工具

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

momei

墨梅无锋

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pegasus

Config files for my GitHub profile.

playpiano

Java弹奏钢琴乐曲

pxplan

CVE-2023-2023

ruoyi-vue-pro

for pegasus

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shadowsocks

记录一下Shadowsocks的前世今生，以及一个简单的教程总结

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

webshell

This is a webshell open source project

wooyun_articles

drops.wooyun.org 乌云Drops文章备份

wooyun_public

This repo is archived. Thanks for wooyun! 乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

ysuserial