rassec Goto Github PK

sb-actuator

Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测

scan4all

vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

scancve

监控github上CVE增量，并发送微信通知

scanport

golang版高性能端口扫描工具

scantastic-tool

It's bloody scantastic

schtask-bypass

免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus

scripts

search-tools

聚合空间测绘搜索（Fofa,Zoomeye,Quake,Shodan,Censys,BinaryEdge）

search_viewer

集Fofa、Hunter鹰图、Shodan、360 quake、Zoomeye 钟馗之眼、censys 为一体的gui图形界面化工具

sec-cheatsheets

Notes on security vulnerabilities and exploits.

sec-dev-in-action-src

《白帽子安全开发实战》配套代码

sec_profile

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

secdictionary

实战沉淀字典

secguide

面向开发人员梳理的代码安全指南

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secopsdev

自己闲来无事所写以及工作中抽取的安全/运维/开发方面的小脚本

sectaskbars

Security Product Taskbar Icons (to identify from screenshots)

sectoolset

The security tool(project) Set from github。github安全项目工具集合

security-data-analysis-and-visualization

2018-2020青年安全圈-活跃技术博主/博客

security-tools-list

安全渗透测试使用工具集合及使用文档整理

security_article

scrapy website Article and link ...

securitymind

share experience towards for information management, brainstorming and so on.

securitytechnique

Security technique research and some funny work on it !

seeyonexp

致远命令执行漏洞

sef

SEF is a Subdomain Enumeration Framework that covers passive, active & permuted enumeration

self_back

整理的一些笔记和记录

selks

A Suricata based IDS/IPS/NSM distro

seq2seq-web-attack-detection

The implementation of the Seq2Seq model for web attack detection. The Seq2Seq model is usually used in Neural Machine Translation. The main goal of this project is to demonstrate the relevance of the NLP approach for web security.

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

server-status_pwn

A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.