kakakpy Goto Github PK

1book

《Web安全之机器学习入门》

aes-killer

Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

androidchecklist

Android应用审计checklist整理

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

antsword

AntSword is a cross-platform website management toolkit.

apache-struts-pwn_cve-2017-9805

An exploit for Apache Struts CVE-2017-9805

apkvulcheck

This is a tool to help androidcoder to check the flaws in their projects.

app-env-docker

基于 Docker 的真实应用测试环境

app_security

appmon

Documentation:

archerysec

Centralize Vulnerability Assessment and Management for DevSecOps Team

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

astra

Automated Security Testing For REST API's

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-website

MITRE ATT&CK Website

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awvspy

awvs python library

banruo

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bbscan

A tiny Batch weB vulnerability Scanner

blasting_dictionary

爆破字典

blog

技术博客：知其然，知其所以然

blueshell

红蓝对抗跨平台远控工具

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-scans

aquatone results for sites with bug bountys

burp-api-drops

burp suite API 处理http请求和响应的基本流程

burp-image-size

Image size issues plugin for Burp Suite

burp-rest-api

REST/JSON API to the Burp Suite security tool.