wsfengfan Goto Github PK

0day-security-software-vulnerability-analysis-technology

0day安全_软件漏洞分析技术

1book

《Web安全之机器学习入门》

7kbscan-rdp-sniper

一款有图形界面的RDP(3389)口令检测工具

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

android-security-awesome

A collection of android security related resources

antsword-loader

AntSword 加载器

apache_solr_rce_via_velocity_template

Apache_Solr_RCE_via_Velocity_template

apt34

APT34/OILRIG leak

arjun

Arjun is a python script for finding hidden GET & POST parameters.

assetscan

资产探测工具，检测存活，检测风险端口，常规端口，全端口探测等等，对探测的端口的脆弱面进行安全分析进行

autosploit

Autosploit = Automating Metasploit Modules.

autosploit_chs

渗透工具AutoSploit的汉化版

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

bailu-sed-tool

白鹿社工字典生成器，灵活与易用兼顾。

blog

bug-hunters

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpfakeip

一个用于伪造ip地址进行爆破的Burp Suite插件

bypassantivirus

远控免杀系列

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

cve-2017-11882

CVE-2017-11882 exploitation

cve-2017-15708

Apache synapse RMI 反序列化

cve-2018-1270

Spring messaging STOMP protocol RCE

cve-2018-2893

CVE-2018-2893-PoC

cve-2018-2894

CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script

cve-2018-3191

CVE-2018-3191-PoC

cve-2018-3245

CVE-2018-3245-PoC

cve-2019-0708