happystjava Goto Github PK

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

blasting_dictionary

爆破字典

blazehttp

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exp

exploit-dictionary

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

generative-ai-for-beginners

18 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/

githack

A `.git` folder disclosure exploit

joomscan

OWASP Joomla Vulnerability Scanner Project

kali-windows

Kali Windows

keytabextract

Extracts Key Values from .keytab files

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

powershell_fisher

利用powershell收集用户浏览器中保存的密码，桌面办公文件，电脑硬件软件信息。发送到指定邮件

prism-trojan

棱镜后门

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_codes

个人安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档

seth

Perform a MitM attack and extract clear text credentials from RDP connections

thinkphp-vuln

关于ThinkPHP框架的历史漏洞分析集合

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

weblogicpassworddecryptorui

解密weblogic AES或DES加密方法

writeups

国内各大CTF赛题及writeup整理

wydomain

to discover subdomains of your target domain

xray

xray 安全评估工具

xssprobe

xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.