jdxn Goto Github PK

2021_hvv

2021 hw

android-vulnerability-mining

Android APP漏洞之战系列，主要讲述如何快速挖掘APP漏洞

androidsecnotes

some learning notes about Android Security

awesome-cloud-security

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

awesome-malware-analysis

Defund the Police.

awesome-security-weixin-official-accounts

网络安全类公众号推荐，欢迎大家推荐

blasting_dictionary

爆破字典

blog

burpcollector

通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

burploaderkeygen

Burp Suite Pro Loader & Keygen ( BurpSuite version v2020.1 - ∞ )

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

chinese-security-rss

网络安全资讯的RSS订阅，网络安全博客的RSS订阅，网络安全公众号的RSS订阅

cve-2020-15778

easyxsspayload

XssPayload List . Usage:

exploits

fofa_view

FOFA Pro view 是一款FOFA Pro 资产展示浏览器插件，目前兼容 Chrome、Firefox、Opera。

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

jd-seckill-maotai

京东茅台抢购最新优化版本，京东秒杀，添加误差时间调整，优化了茅台抢购进程队列

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

listen1_chrome_extension

one for all free music in china (chrome extension, also works for firefox)

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

penetration-suite-toolkit

本项目制作的初衷是帮助渗透新手快速搭建工作环境，工欲善其事，必先利其器。

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE

reverse-tpg

使用 express 和 vue3 搭建的 ChartGPT 演示网页

revokemsgpatcher

:trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）

securitylist

A list for Web Security and Code Audit

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

terraformgoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.