quinzhi Goto Github PK

123test

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

behinderclientsource

❄️冰蝎客户端源码-V4.0.6🔞

clang-tidy-plugin-starter

Starter template for a clang-tidy plugin.

cve-2021-26855

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

elastalert

Easy & Flexible Alerting With ElasticSearch

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gotestmodule

gotestmodule

hugo

The world’s fastest framework for building websites.

i-s00n

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javaweb-sec

攻击Java Web应用-[Java Web安全]

jdwp-shellifier-with-output

jeecg-boot

⭐️「企业级低代码平台」前后端分离架构SpringBoot 2.x，SpringCloud，Ant Design&Vue，Mybatis，Shiro，JWT。强大的代码生成器让前后端代码一键生成，无需写任何代码! 引领新的开发模式OnlineCoding->代码生成->手工MERGE，帮助Java项目解决70%重复工作，让开发更关注业务，既能快速提高效率，帮助公司节省成本，同时又不失灵活性。

jekyll

:globe_with_meridians: Jekyll is a blog-aware static site generator in Ruby

jsinfo-scan

递归式寻找域名和api。

kaimonkey

KaiMonkey provides example vulnerable infrastructure to help cloud security, DevSecOps and DevOps teams explore and understand common cloud security threats exposed via infrastructure as code.

logtamper

python修改linux日志

mssql_sql_bypass_wiki

MSSQL注入提权,bypass的一些总结

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

pentest_note

渗透测试常规操作记录

privacy

个人数据泄漏检测网站，适用于 QQ / 京东 / 顺丰 / 微博。

quinzhi.github.io

redteaming2020

RedTeaming知识星球2020年安全知识汇总

ruoyi-cloud

:tada: (RuoYi)官方仓库 基于Spring Boot、Spring Cloud & Alibaba的分布式微服务架构权限管理系统

sap_exploit

Here you can get full exploit for SAP NetWeaver AS JAVA

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)