duxin2020286 Goto Github PK

30min_guides

覃健祥的学习笔记，各种几十分钟入门的文档

antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

appshark

c-jwt-cracker

JWT brute force cracker written in C

cobra

Source Code Security Audit (源代码安全审计)

crawl_freebuf

crawl freebuf

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

csplugins

Cobaltstrike Plugins

fbi-analyzer

A Flexible Log Analysis System Based on Golang and Lua-Plugins. 插件化的准实时日志分析系统。

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

gitlab-watchman

Monitoring GitLab for sensitive data shared publicly

goby

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

hades

Static code auditing system

ius

Intercept Upstream Server for WAF cheating attackers. 用来欺骗恶意用户的上游拦截服务器。

jon

jon 是一款LINUX系统攻防工具箱，包含扫描，入侵，痕迹清理，木马，网站测试等各种黑客工具。

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

learning-codeql

CodeQL Java 全网最全的中文学习资料

micro8

Gitbook

myproject

ntdsxtract

Active Directory forensic framework

pentest-tools

内网渗透工具

python-100-days

Python - 100天从新手到大师

redis-rogue-server

Redis 4.x/5.x RCE

redteaming2020

RedTeaming知识星球2020年安全知识汇总

releases-openstar-enterprise

releases-openstar-Enterprise

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

subdomainsbrute

A fast sub domain brute tool for pentesters

the-flask-mega-tutorial-zh

翻译自Miguel Grinberg的blog https://blog.miguelgrinberg.com 的2017年新版The Flask Mega-Tutorial教程

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)