w4n95 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2021cdn

2022-hw-poc

2022 护网行动 POC 整理

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

advisories

aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

afrog-pocs

afrog-pocs 是 afrog 漏洞检测工具的官方 PoCs（Proof of Concepts）库。

aggregate-paper

文章聚合

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

apereo-cas-attack

WIP: Demo for Attacking Apereo CAS

api-t00l

互联网厂商API利用工具。

apifuzzdictionary

红队API接口Fuzz字典，WEB安全，渗透测试，API，字典

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

apt_t00ls

高危漏洞利用工具

ary

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

as-exploits

**蚁剑后渗透框架

attackdetection

Attack Detection

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-incident-response

A curated list of tools for incident response

awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

awesome-redteam

一个红队知识仓库

awesome-security-newsletters

Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

awesomescript

AntSword Shell 脚本分享/示例

binary-learning

二进制安全相关的学习笔记，感谢滴水逆向的所有老师辛苦教学。

btab

Blue team analyisis box is a tool for blue team security analyisis.

bug-bounty

bounty collection

bug-pocket

小型漏洞库，提供FOFA语法及批量脚本，具体利用法请参考别的漏洞库，共4种类型47项

burp-awesome-tls

Fixes Burp Suite's poor TLS stack. Bypass WAF, spoof any browser.

burp-extensions

Burp Extensions