akiyamaliet Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021_hvv

2021 hw

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

android_app_security_crack

安卓应用的安全和破解

antsword

AntSword is a cross-platform website management toolkit.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apt_report

Interesting apt report collection and some special ioc express

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

as-exploits

**蚁剑后渗透框架

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesomexss

Awesome XSS stuff

bbfuzzing.txt

behinder

“冰蝎”动态二进制加密网站管理客户端

bloodhound

Six Degrees of Domain Admin

bootstrap

The most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web.

bypassavaddusers

绕过杀毒软件添加用户

caidao-official-version

**菜刀官方版本，拒绝黑吃黑，来路清晰

chainsaw

Rapidly Search and Hunt through Windows Event Logs

chinese-names-corpus

中文人名语料库。人名生成器。中文姓名,姓氏,名字,称呼,日本人名,翻译人名,英文人名。可用于中文分词、人名实体识别。

chunked-coding-converter

Burp suite 分块传输辅助插件

cobaltstrikeparser

cobaltstrikescan

Scan files or process memory for CobaltStrike beacons and parse their configuration

crackmapexec

A swiss army knife for pentesting networks

ctf-tools

Some setup scripts for security research tools.

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-10977

GitLab 12.9.0 Arbitrary File Read

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

dictionary

来自pwn硬糖师傅的爆破字典