java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linuxstack

Linux技术栈

maltrail

Malicious traffic detection system

mitigating-web-shells

Guidance for mitigation web shells. #nsacyber

ocift

一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

pentestdb

WEB渗透测试数据库

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

polosec

Config files for my GitHub profile.

polosec.github.io

prepare-for-awd

AWD攻防赛脚本集合

provenance-papers

qfnuautotemperaturesubmit

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

remote-access-trojan-database

A database of RAT collected from Internet

rootkits-list-download

This is the list of all rootkits found so far on github and other sites.

seamoon

月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 云渗透工具集，致力于开启云原生的渗透模式。

secmind

安全导图

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

swagger-hack

自动化爬取并自动测试所有swagger-ui.html显示的接口

szhe_scan

碎遮SZhe_Scan Web漏洞扫描器，基于python Flask框架，对输入的域名/IP进行全面的信息搜集，漏洞扫描，可自主添加POC

uestc_report_playwright

电子科技大学研究生每日自动健康打卡

upload-labs

一个想帮你总结所有类型的上传漏洞的靶场

vulawdhub

该项目是利用docker技术创建的有漏洞的cms环境集合，可以进行练习

wafninja

WAFNinja is a tool which contains two functions to attack Web Application Firewalls.

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

web-malware-collection

Clone of svn repository of http://insecurety.net/projects/web-malware/ project

web-security-learning

Web-Security-Learning

webscan

nmap+masscan扫描器