ershu1 Goto Github PK

fuyao-go

自动化进行目标资产探测和安全漏洞扫描｜适用于赏金活动、SRC活动、大规模使用、大范围使用|通过使用被动在线资源来发现网站的有效子域｜通过强大且灵活的模板，模拟各种安全漏洞检查！Automate target asset detection and security vulnerability scanning | Suitable for bounty campaigns, SRC campaigns, mass usage, mass usage | Discover valid subdomains of websites by using passive online resources | Simulate various Security Vulnerability Check

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzilli

A JavaScript Engine Fuzzer

hackbar2.1.3

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

imagecreatefrom-

php imagecreatefrom* functions

imagesegmentation

kmeans,fcm,kfcm实现图像分割

innng

inscan

边界打点后的自动化渗透工具

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jpg_payload

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集)

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

me-tools

一些小工具，淘宝抓包xposed模块、微信运动、秒杀抢票、table2json、抹机王、flyme助手

medusa

:cat2:美杜莎扫描器（scanner） http://medusa.ascotbe.com

nsfocus-rsas-knowledge-base

绿盟科技漏洞扫描器(RSAS)漏洞库

onlinetools

在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..

opencv-pyqt5

使用opencv与pyqt5实现的图像处理程序，已实现转灰度图、图像平滑、形态学操作、梯度计算、阈值处理、边缘检测、轮廓检测

oracle-weblogic-cve-2017-10271

WebLogic Wls-wsat XMLDecoder 反序列化

param-miner

payloadsallthethings-1

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest_questions

渗透测试面试题目

pocassist

pocassist是一款全新的开源漏洞测试框架，无需代码知识也可实现对poc的在线编辑、管理、测试。 使用之前请先阅读文档。

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE

poc_exp

漏洞概念证明及利用工具，主要基于Poc-bomber等优秀框架，分享一些0day和HW工具

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pwn-env-init

CTF PWN 做题环境一键搭建脚本

radar

实时风控引擎(Risk Engine)，自定义规则引擎（Rule Script），完美支持中文，适用于反欺诈(Anti-fraud)应用场景，开箱即用！！！移动互联网时代的风险管理利器，你 Get 到了吗？

remote-desktop-services-remote-code-execution-vulnerability-cve-2019-0708-

rce exploit , made to work with pocsuite3