shystartree Goto Github PK

ai-for-security-learning

安全场景、基于AI的安全算法和安全数据分析学习资料整理

android-security-awesome

A collection of android security related resources

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

async_exp

异步并发通用工具，主要发现异步并发漏洞。如短信炸弹发送间隔限制突破等等~

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

blogbackup

博客备份

blogpic

book

:green_book:我的个人书籍学习和收藏

dexchanger

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

element-plus-vite-starter

A starter kit for Element Plus with Vite

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

fuzzscanner

一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。

greyhame-2017

知识星球"灰袍技能" 2017 精华

hackrequests

It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.

hidex-hack

anti reverse by hack dex file

ics_scan

ICS设备信息获取与漏洞检测，完整版已应用于国家电网充电桩渗透测试

inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

learnpython

Python的基础练习代码与各种爬虫代码

micro8

Gitbook

mitreattack-python

A python module for working with ATT&CK

mysqlmonitor

MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)

nessus_to_report

Nessus中文报告自动化脚本

nishang

Nishang - PowerShell for penetration testing and offensive security.

operational-security

各安全大会业务安全资料

passcoding

常见编码/密码自动加解码/加解密

poc

poc from bugscan beebeeto

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE