jinstart Goto Github PK

across

Across the Great Wall we can reach every corner in the world

aquatone

A Tool for Domain Flyovers

awesomexss

Awesome XSS stuff

batch_scanning

Scanning the public SRC in batch and box

behinder

“冰蝎”动态二进制加密网站管理客户端

bluekeep

Proof of concept for CVE-2019-0708

burpsuite

BurpSuite using the document and some extensions

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

bypass-403

A simple script just made for self use for bypassing 403

code-audit-challenges

Code-Audit-Challenges

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dnstricker

A simple dns resolver of dns-record and web-record log server for pentesting

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2019-17558、CVE-2019-6340

fastjson

Fastjson姿势技巧集合

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gsil

Github Sensitive Information Leakage（Github敏感信息泄露）

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

langsrccurise

SRC子域名资产监控

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

log4j2-reverseshell-poc

marshalsec

meltdown

Local Exploit for Meltdown

micro8

miscsecnotes

some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

mydict

MyDict - 自行收集的高频使用字典文件

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得