startat35 Goto Github PK

520apkhook

把msf生成的安卓远控附加进普通的app中，并进行加固隐藏特征。可以绕过常见的手机安全管家。

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

allforone

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-poc

一个各类漏洞POC知识库

awesome-redteam

一个红队知识仓库

awesome-security-weixin-official-accounts

网络安全类公众号推荐，欢迎大家推荐

awesomepentestingresources

A list of resources that I built up over the past few years in Cyber Security

bbtz

BBT - Bug Bounty Tools (examples💡)

bug-bounty-resources

Ressources for bug bounty hunting

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

chatgpt-web

用 Express 和 Vue3 搭建的 ChatGPT 演示网页

command

红队常用命令速查

cuiri

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

cve_hub

cybersecurity-resources

A Library of various cybersecurity resources

daniu-comment

存放daniu评论，Utterance

dolphinscheduler-apidisclosure

dolphinscheduler-codeexec

dolphinscheduler-csrf

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

enscan_go

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

flavortown

Various ways to execute shellcode

gf

A wrapper around grep, to help you grep for things

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep