jywah Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

antsword

AntSword is a cross-platform website management toolkit.

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

awesome-cloud-security

awesome cloud security || 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

behinder

“冰蝎”动态二进制加密网站管理客户端

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

chinese_chess_python3

**象棋python3版本

cloud-native-security

云安全

cnseay

Seay源代码审计系统

cobaltstrike

cobaltstrike4.0

收集的CobaltStrike4.0

corsy

CORS Misconfiguration Scanner

dongtai-agent-java

“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。

dorabox

DoraBox,多拉盒 - 掌握常见漏洞攻防，快速提升渗透能力

elephantfish

elephantfish: 一个只有124行的**象棋引擎

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

f-scrack-1

fofa-collect

hack

渗透测试资源库

hacking

🌐Collate and develop network security, Hackers technical documentation and tools, code.

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

java-sec-code

Java常见通用漏洞和修复的代码以及利用payload

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

metron

Mirror of Apache Metron

micro8

Gitbook