peiqi0 Goto Github PK

aboutsecurity

用于渗透测试和红队基础设施建设的 payload 和 bypass 字典。A list of payload and bypass lists for penetration and red team infrastructure build.

caesar

一个全新的敏感文件发现工具

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

defihacklabs

Reproduce DeFi hacked incidents using Foundry.

fapro

Fake Protocol Server

gin-vue-admin

基于vite+vue3+gin搭建的开发基础平台，集成jwt鉴权，权限管理，动态路由，分页封装，多点登录拦截，资源权限，上传下载，代码生成器，表单生成器等开发必备功能，五分钟一套CURD前后端代码。

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

govulndb

[mirror] The Go Vulnerability Database

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

openark

OpenArk is an open source anti-rookit(ARK) tool for Windows.

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peiqi-wiki-book

面向网络安全从业者的知识文库🍃

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

satc

A prototype of Shared-keywords aware Taint Checking, a novel static analysis approach that tracks the data flow of the user input between front-end and back-end to precisely detect security vulnerabilities.

sentinel-cendertron

Cendertron = Crawler + cendertron, Crawl AJAX-heavy client-side Single Page Applications (SPAs), deploying with docker, focusing on scraping requests(page urls, apis, etc.), followed by pentest tools(Sqlmap, etc.). Cendertron can be used for extracting requests(page urls, apis, etc.) from your Web 2.0 page.

testtalk

wiki-book-talk

文库评论存档

yakit

yak gRPC Client GUI - 集成化单兵工具平台

yao

Yao A low code engine to create web services and dashboard.