sie504 Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

a-movie-of-flask

angelsword

Python3编写的CMS漏洞检测框架

apache_shiro_1.2.4_rce

Apache shiro <= 1.2.4 rememberMe 反序列化漏洞利用工具

awesome-waf

🔥 A curated list of awesome web-app firewall (WAF) stuff.

biu

网络资产发现、漏洞扫描

blasting_dictionary

爆破字典

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

butian_spider

2019 补天厂商爬虫与数据可视化文件打包

cms-hunter

CMS漏洞测试用例集合

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

cve-2019-2725

CVE-2019-2725 命令回显

dirsearch

Web path scanner

django_mooc

easyxsspayload

XssPayload List . Usage:

fastjson

:bullettrain_side: A fast JSON parser/generator for Java. (Aliyun Data Lake Analytics https://www.aliyun.com/product/datalakeanalytics powered by fastjson )

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

h1domains

HackerOne "in scope" domains

hacking_py

htmllearning

This is a repo for sharing My knowlage about html

java-sec-code

Java常见通用漏洞和修复的代码以及利用payload

mall

a project of php

markdown-resume-template

BAT程序员自己的简历模板分享出来了 。技术简历追求简单明了，避免没有必要的花哨修饰，大家可以fork到自己仓库中，基于这个模板进行修改。

ml1024

Everyday Machine Learning.An essay,paper or everything about Machine Learning.

ofx

漏洞批量验证框架

paper

security technology documents

parameth

This tool can be used to brute discover GET and POST parameters

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF