blbana Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

aaa

apollo-build-scripts

Apollo Build Scripts

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

arsenal

Cobalt Strike 3.13 Arsenal Kit

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

b374k

PHP Webshell with handy features

blbana.github.io

blog

没事写写文章，喜欢的话请点star，想订阅点watch，千万别fork！

cobra

Source Code Security Audit (源代码安全审计)

cobra_tests

consul

Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.

cve-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

cybersecurityrss

RSS: 优秀的个人情报来源

dao-2048

docker_pwn

druid

Apache Druid: a high performance real-time analytics database.

elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

epub-press

📚 Web service for creating ebooks from collections of websites.

epub-press-clients

📦 Clients for building books with EpubPress.

esd

Enumeration sub domains(枚举子域名)

gfwlist

The one and only one gfwlist here

information_security_books

150本信息安全方面的书籍书籍（持续更新）

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

leakscan

在线漏洞扫描

learn-java-deserialization-vulnerability

Recently learning about Java deserialization vulnerabilities, I will push the vulnerability payload and vulnerability analysis articles that I have analyzed.

luuman.github.io

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

oh-my-zsh

A delightful community-driven (with 1,000+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.