xingkong123600 Goto Github PK

1book

《Web安全之机器学习入门》

allscanner

数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.

android-scripts

Collection of Android reverse engineering scripts

android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

android_poke

poke android ,dump dex

androidapimonitoring

angelsword

漏洞检测框架

apache-log4j-learning

Apache-Log4j漏洞复现笔记

apache-log4j-poc

Apache Log4j 远程代码执行

auto-earn

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

autovideo

自动刷快手极速版、抖音极速版、火山急速版、聚看点、趣头条等收益类App，基于AutoJs

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awvs-decode

AWVS 最简单、最快、最方便、最新的解码/解密方法，仅15行代码！！无须任何依赖任何工具

awvs12_docker

AWVS12 最新版本12.0.190902105_x64

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

bombus

合规审计平台

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

bypass_waf

waf自动爆破(绕过)工具

cc

cheatsheets

Penetration Testing/Security Cheatsheets

coeus

Android apk/sdk Scan包括android apk/sdk 安全审计代码扫描以及国内政策扫描

crack_dexhelper

梆梆企业加固详细逆向分析过程， 包含两种对该加固的脱壳机（直接解密classes0.jar和基于frida hook）

crack_libsgmain

Reverse libsgmain 聚安全sgmain逆向

crawlergo

A powerful dynamic crawler for web vulnerability scanners

diffuse

Diffuse is a tool for diffing APKs, AABs, AARs, and JARs

digital-privacy

一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

dm-ticket

大麦网自动购票, 支持docker一键部署。Damai automatically purchases tickets, running in docker container.

domain-monitor

子域名监测源码与环境搭建

droidsslunpinning

Android certificate pinning disable tools