grant555 Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

12306

12306智能刷票，订票

2018-qwb-ctf

2018强网杯CTF___题目整理

404starlink-project

Focus on promoting the evolution of tools in different aspects of security research.专注于推动安全研究各个领域工具化.

adhrit

Adhrit is an open source Android APK reversing and analysis tool that can help secuity researchers and CTF enthusiasts alike. The tool is an effort to cut down on the amount of time spent on reversing and basic reconnassaince of Android applications.

alibaba-java-coding-guidelines

Gitbook for AJCG

androidchecklist

Android应用审计checklist整理

angelsword

Python3编写的CMS漏洞检测框架

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

aquatone

A Tool for Domain Flyovers

atomic-red-team

Small and highly portable detection tests.

autosploit

Automated Mass Exploiter

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

back_test

test

bandit

Python AST-based static analyzer from OpenStack Security Group

bbscan

A tiny Batch weB vulnerability Scanner

blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

bluekeep

Proof of concept for CVE-2019-0708

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

burp-ysoserial

YSOSERIAL Integration with burp suite

burpsuite

BurpSuite using the document and some extensions

burpsuite_pro_v1.7.32

BurpSuite_Pro_v1.7.32

burpunlimited

This project EXTENDS BurpLoader's license. It is NOT intended to replace BurpLoader.

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

corscanner

Fast CORS misconfiguration vulnerabilities scanner🍻

creep3r

This is a big smash up of a lot of various tools I have made in the past along with some new ones. It includes a array of tools for helping with pentesting and messing around on the net. Currently only have installer files made for Ubuntu & Debian systems, but if you know what you're doing you can easily read them and get what you need to get all the dependencies installed on your own. I made a quick basic demonstration video you to give a general overview of what it has included, you can watch it here: http://youtu.be/z9rq1SBIYI0 Here is another short video to show how the Dorker piece works: http://youtu.be/43aphr0QRng It's a bit of a constant work in progress but will be posting updates from time to time as I add more stuff and get them stabilized and working properly without much issue. If you have any questions, comments, or suggestions just let me know. Thanks, H.R.

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

csrf-request-builder