luwikes Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

android_frida_trace_mytrace

angelsword

Python3编写的CMS漏洞检测框架

antsword

AntSword is a cross-platform website management toolkit.

app_security

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awvs13_batch_py3

针对 AWVS扫描器开发的批量扫描脚本，支持联动xray、burp、w13scan等被动批量

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

axis2shell

blasting_dictionary

爆破字典

burpunlimited

This project EXTENDS BurpLoader's license. It is NOT intended to replace BurpLoader.

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cms-exploit-framework

CMS Exploit Framework

code-audit-challenges

Code-Audit-Challenges

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

dede_exp_collect

collection dedecms exp use pocsuite framework 收集织梦的一些漏洞，并用pocsuite框架写出利用程序。打造一键日dede

dirs3arch

HTTP(S) directory/file brute forcer

domain_hunter

A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件

dsvw

Damn Small Vulnerable Web

exp

收集各种各样的exp

exploit

常用的一些Exploit，经常会更新，也欢迎各位提交新的exp给我。

exploit-1

My exploitDB.

f-middlewarescan

A vulnerability detection scripts for middleware services

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

fenghuangscanner_v2

fortify

源代码漏洞の审计

frida-dexdump

Fast search and dump dex on memory.

github-monitor

Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

go-common

哔哩哔哩 bilibili 网站后台工程 源码

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露）