zhthaidao Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

burpsuite

BurpSuite using the document and some extensions

drozer-modules

exploit-database

The official Exploit Database repository

loki

Loki - Simple IOC and Incident Response Scanner

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

my-little-ransomware

easy ransomware module base on csharp.

nishang

Nishang - PowerShell for penetration testing and offensive security.

nosqlmap

Automated Mongo database and NoSQL web application exploitation tool

pasc2at

高级PHP应用程序漏洞审核技术 by 80vul

penetration

this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

qrljacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sqlmap

Automatic SQL injection and database takeover tool

tools

一些实用的python脚本

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

weakfilescan

动态多线程敏感信息泄露检测工具

webshell

This is a webshell open source project

wydomain

目标系统信息收集组件

wyportmap

目标端口扫描+系统服务指纹识别