omgdomgd Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2022-hw-poc

2022 护网行动 POC 整理

alicloud-tools

阿里云ECS、策略组辅助小工具

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

arl2

ARL 资产侦察灯塔系统（可运行，添加指纹，提高并发，升级工具及系统，无限制修改版） | ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awesome-cloud-security

awesome cloud security || 收集一些国内外不错的云安全资源，主要是国内

awesome-redteam

一个红队知识仓库

bug-bounty-toolz

BBT - Bug Bounty Tools

bug_bounty_writeups

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

cve-2017-9841-scan

cve-monitor

github cve monitor

ddgbotnettracker

Source code of DDG Mining Botnet tracker

docker_v2_catalog

Registry API 未授权访问漏洞利用

exploit-dictionary

file_read

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

kirin-say.github.io

test takeover

learning-php-ext

A series of mini-projects used to learn PHP-Ext for beginners

lenochka-nn.github.io

mind-maps

Mind-Maps of Several Things

my-ctf-web-challenges

Collection of CTF Web challenges I made

my-presentation-slides

Collections of Orange Tsai's public presentation slides.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

redis1.3.6

redis 1.3.6源码学习记录

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list