aaeolus Goto Github PK

aaeolus.github.io

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

brain_map

add

burpsuite

Burp Suite loader version --> ∞

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

codeql

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

dict

一些弱口令、fuzz字典

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，均为亲测可用的脚本文件，优先更新高危且易利用的漏洞利用脚本，最近添加CVE-2020-1938、CVE-2020-2551、CVE-2019-2618、CVE-2019-6340

fastjson_rce_tool

fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制

frida_hook_libart

Frida hook some jni functions

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

golang-tutorial

Go语言快速入门

greyhame-2017

知识星球"灰袍技能" 2017 精华

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露）

how-to-read-source-and-fuzzing

一些阅读源码和Fuzzing 的经验..

httpbin

HTTP Request & Response Service, written in Python + Flask.

image

information_collect_tool

子域名后续的信息收集工具

information_collection_handbook

Handbook of information collection for penetration testing

invoke-phant0m

Windows Event Log Killer

jdsrc-small-classroom

京东SRC小课堂系列文章

k8s-mind-map

K8S安全攻防思维导图 | Docker安全攻防思维导图

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

linux-command

Linux命令大全搜索工具，内容包含Linux命令手册、详解、学习、搜集。https://git.io/linux

memcrashed-ddos-exploit

DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

mimipenguin

A tool to dump the login password from the current linux user