arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

ctf_web_dockers

dockerfile of CTF web practices

fscan

一款内网扫描工具，方便一键大保健~

fxxkxss

将令你眼前一亮的XSS利用工具！

geacon_plus1

CobaltStrike beacon written in golang

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

h1_assets

hackerone资产收集

heiheip

heiheip.github.io

jjjjjjjjjjjjjs

爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应

learning-codeql

CodeQL Java 全网最全的中文学习资料

lolb

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

nse_vuln

Nmap扫描、漏洞利用脚本

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

poc

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

security-research

Security Research

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

zone-h.github.io