gylearner Goto Github PK

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

myhash

navicat-keygen-tools

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

office-exploits

office-exploits Office漏洞集合 https://www.sec-wiki.com

onlinetools

在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..

openwrt-shadowsocks

Shadowsocks-libev for OpenWrt/LEDE

pentestscripts

白名单利用代码、渗透工具

phpcodz

Php Codz Hacking

pocsuite

This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

portfwd

User-space TCP/UDP port forwarding services

powershell

Useful PowerShell scripts

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privilege-escalation

This contains common local exploits and enumeration scripts

python-crawler-tutorial-starts-from-zero

python爬虫教程，带你从零到一，包含js逆向，selenium, tesseract OCR识别,mongodb的使用，以及scrapy框架

python-webshell

webshell writen in python

redsocks

transparent TCP-to-proxy redirector

reverse-engineering-for-beginners

translate project of Drops

reverse-shell-generator

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

rtcp

利用 Python 的 Socket 端口转发，用于远程维护

screentogif

🎬 ScreenToGif allows you to record a selected area of your screen, edit and save it as a gif or video.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secwiki-webshell

Webshell

shadowsocks-libev

Bug-fix-only libev port of shadowsocks. Future development moved to shadowsocks-rust

shadowsocks-windows

If you want to keep a secret, you must also hide it from yourself.

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sqlmap

Automatic SQL injection and database takeover tool

static-binaries

Various *nix tools built as statically-linked binaries

subdomainsbrute

A fast sub domain brute tool for pentesters