kakakpy Goto Github PK

qnsm

QNSM is network security monitoring framework based on DPDK.

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

reissue-request-scripter

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

rhizobia_j

JAVA安全SDK及编码规范

saidict

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

script-security-plugin

Allows Jenkins admins to control what in-process scripts can be run by users

sec-chart

安全思维导图集合

sec-dev-in-action-src

《白帽子安全开发实战》配套代码

secscan-authcheck

越权检测工具

security-operation

安全运维技巧整理

security_w1k1

collect

securitypaper-web

Security Paper

serialkiller

Look-Ahead Java Deserialization Library

shiro-exploit

Shiro反序列化利用工具，支持key爆破，配合ysoserial，生成回显Payload

spring-rce-war

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

sqlmap4burp

sqlmap embed in burpsuite

src

日常src平台域名收集

ssxapp

ssxapp updatas txt

static-dom-xss-scanner

Static DOM XSS Scanner is a Static Analysis tool written in python that will iterate through all the JavaScript and HTML files under the given directory and will list out all the possible sources and sinks that may cause DOM XSS. At the end of the scan, the tool will generate an HTML report.

struts-rce-cve-2017-9805

CVE 2017-9805

svn-extractor

simple script to extract all web resources by means of .SVN folder exposed over network.

szhe_scan

碎遮SZhe_Scan Web漏洞扫描器，基于python Flask框架，对输入的域名/IP进行全面的信息搜集，漏洞扫描，可自主添加POC

theharvester

E-mails, subdomains and names Harvester - OSINT

tide

目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~

trident

Java通用漏洞修复安全组件

ui5-idea

vtest

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w3a_soc

元豚科技 - 基于日志安全分析做切入，做最好用的「云原生安全运维工作台」