geni0r Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

bug-project-framework

漏洞利用框架模块分享仓库

bypassavaddusers

绕过杀毒软件添加用户

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cobra

Source Code Security Audit (源代码安全审计)

cve-2021-4034-poc

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

dingtalkchatbot

钉钉群自定义机器人消息Python封装

ecommercecrawlers

实战🐍多种网站、电商数据爬虫🕷。包含🕸：淘宝商品、微信公众号、大众点评、招聘网站、闲鱼、阿里任务、博客园、百度贴吧、豆瓣电影、包图网、全景网、豆瓣音乐、某省药监局、搜狐新闻、机器学习文本采集、fofa资产采集、汽车之家、国家统计局、百度关键词收录数、蜘蛛泛目录❤️❤️❤️

filemonitor

文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

get_domain

hackeronereports

Here you can find mostly all disclosed h1 reports

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

langsrccurise

SRC子域名资产监控

notes-research

研究笔记[My Research Notes Backup]

nypython

Python写的一些小工具---验证码识别，极验验证码破解，抓包工具嗅探器等

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentestdb

各种数据库的利用姿势

ppthub

大安全各领域各公司各会议分享的PPT及行业合规、安全认证、安全书籍汇总

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

random-python

Various Python scripts that have come in handy but aren't important enough to get their own repository

redis-rce

remote code execute for redis4 and redis5

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

sec-jobs

信息安全实习和校招的面经、真题和资料 减少安全选手找实习/工作的痛苦

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_codes

安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档与工具整理

src-experience

工欲善其事，必先利其器