zh3feng Goto Github PK

-nanshihui-scan-t

https://github.com/nanshihui/Scan-T.git

alive-host

AliveHost is a simple bash script that takes a list of hosts (Ex: from Sublist3r) and checks to see if they're up / alive!

aquatone

A Tool for Domain Flyovers

barmie

Java RMI enumeration and attack tool.

blog

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bypasscaptcha

A bypass test of bb

cdxgen

Creates CycloneDX Software Bill-of-Materials (SBOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI//CD pipeline with automatic submission to Dependency Track server.

codeql-community-packs

Collection of community-driven CodeQL query, library and extension packs

codeql-debug

container-security

Resources for container security research

crackcaptcahlogin

CrackCaptcahLogin

ctf-all-in-one

一本 CTF 领域的大杂烩指南

cyclonedx-maven-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

dangerous_java_serialize_libaries

A List of Libraries which Is Dangerous of Deserialization

dics

django-vunl-exercise

https://github.com/nVisium/django.nV

esapi-java-legacy

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications.

firstdemo

goodtoolsurl

gosec

Golang security checker

herokuapp

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jdeserialize

From https://code.google.com/p/jdeserialize/

jdt_ast_dot

Java Code -> AST -> .dot

jetty.project

Eclipse Jetty® - Web Container & Clients - supports HTTP/2, HTTP/1.1, HTTP/1.0, websocket, servlets, and more

jsfinderplus

一款快速提取网站URL的工具

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

marshalsec

mind-map

各种安全相关思维导图整理收集