flying0er Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

active-directory-pentest-notes

个人域渗透学习笔记

adminlte

AdminLTE - Free Premium Admin control Panel Theme That Is Based On Bootstrap 3.x

akka

Akka Project

alfred-workflows

:metal: A collection of Alfred 2 workflows that will rock your world

algorithmvisualizer

Algorithm Visualizer

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

anapickle

Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.

anti-anti-spider

越来越多的网站具有反爬虫特性，有的用图片隐藏关键数据，有的使用反人类的验证码，建立反反爬虫的代码仓库，通过与不同特性的网站做斗争（无恶意）提高技术。（欢迎提交难以采集的网站）（因工作原因去TX写验证码了，项目暂停）

antsword

AntSword is a cross-platform website management toolkit.

anyproxy

A fully configurable http/https proxy in NodeJS

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api_wordlist

A wordlist of API names for web application assessments

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

arachni

Web Application Security Scanner Framework

ascii-zip

A deflate compressor that emits compressed data that is in the [A-Za-z0-9] ASCII byte range.

assetnote

Push notifications for passive DNS data

astermark

关系型数据库水印软件

atlassian-agent

Atlassian's productions crack.

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

avoidz

Avoidz tool to bypass most A.V softwares

awesome-django

A curated list of awesome Django apps, projects and resources.

awesome-docker

:whale: A curated list of Docker resources and projects

awesome-go

A curated list of awesome Go frameworks, libraries and software

awesome-machine-learning

A curated list of awesome Machine Learning frameworks, libraries and software.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-risk-control

风控知识总结

awesome-sec-talks

A collected list of awesome security talks

awesome-security-gists

awesome-spark

A curated list of awesome Apache Spark packages and resources.