cs24 Goto Github PK

secguide

面向开发人员梳理的代码安全指南

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

second-order

Second-order subdomain takeover scanner

securedorg.github.io

security_monkey

Security Monkey

see-surf

Python based scanner to find potential SSRF parameters

sf-docs

Documentation repository for the SysFlow project

shadow-workers

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)

share

资料共享

shhgit

Ah shhgit! Find GitHub secrets in real time

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

sinkholes

:bug: Malware Sinkhole List in various formats

sn1per

Automated Pentest Recon Scanner

spectre-meltdown-checker

Spectre & Meltdown vulnerability/mitigation checker for Linux

spectre-meltdown-poc

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

srcms

SRCMS(轻响应)企业应急响应中心开发框架模版

stoq

An open source framework for enterprise level automated analysis.

streamingphish

Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.

striker

Striker is an offensive information and vulnerability scanner.

struts2-048

CVE-2017-9791

subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

subdomain

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

sublist3r

Fast subdomains enumeration tool for penetration testers

summary

superwordlist

基于实战沉淀下的各种弱口令字典

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmonhunter

An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal

sysmontools

Utilities for Sysmon

syzkaller

syzkaller is an unsupervised, coverage-guided Linux system call fuzzer