xianxiaman Goto Github PK

androidsec

记录一些我自己在学习Android逆向过程中的有意思的东西

anythingllm-docs

Documentation of AnythingLLM by Mintplex Labs Inc.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

bbscan

A tiny Batch weB vulnerability Scanner

box

TVbox开源版（空壳-自行配置）

break

业务风险枚举与规避知识框架（Business Risk Enumeration & Avoidance Kownledge）

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

githack

A `.git` folder disclosure exploit

gitrob

Reconnaissance tool for GitHub organizations

hostilesubbruteforcer

htpwdscan

A python HTTP weak pass scanner

iis_shortname_scanner

an IIS shortname Scanner

jd-gui

A standalone Java Decompiler GUI

knock

Knock Subdomain Scan

lobe-chat

🤯 Lobe Chat - an open-source, modern-design LLMs/AI chat framework. Supports Multi AI Providers( OpenAI / Claude 3 / Gemini / Ollama / Bedrock / Azure / Mistral / Perplexity ), Multi-Modals (Vision/TTS) and plugin system. One-click FREE deployment of your private ChatGPT chat application.

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。

offensiveinterview

Interview questions to screen offensive (red team/pentest) candidates

race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

setting

学习炸七炸八

sqlmap

Automatic SQL injection and database takeover tool

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

sublist3r

Fast subdomains enumeration tool for penetration testers

tbhm

The Bug Hunters Methodology

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

whatwaf

Detect and bypass web application firewalls and protection systems

write-ups-2018

Wiki-like CTF write-ups repository, maintained by the community. 2018