y159357 Goto Github PK

dns-fender

A Proof-of-Concept tool utilizing open DNS resolvers to produce an amplification attack against web servers. Using Shodan APIs and native Linux commands, this tool is in development to cripple web servers using spoofed DNS recursive queries.

dnscat2

ehoney

Seccome Teamer积累十几年的安全经验，都将对外逐步开放，首开的Ehoney欺骗防御系统，该系统是基于云原生的欺骗防御系统，也是业界唯一开源的对标商业系统的产品，欺骗防御系统通过部署高交互高仿真蜜罐及流量代理转发，再结合自研密签及诱饵，将攻击者攻击引导到蜜罐中达到扰乱引导以及延迟攻击的效果，可以很大程度上保护业务的安全。护网必备良药

fuck-xuexiqiangguo

学习强国 懒人刷分工具 自动学习

goby_poc

goby poc or exp,分享goby最新网络安全漏洞检测或利用代码

greyhame-2017

知识星球"灰袍技能" 2017 精华

httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

information_security_books

150本信息安全方面的书籍书籍（持续更新）

installerfiletakeover

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

ios

Here you can find write ups for iOS Vulnerabilities that have been released.

ip2region

Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is ONLY a few megabytes with all IP address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm

jieba

结巴中文分词

jshielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

kalitools

Kali Linux工具清单

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

linux-exploit-development-tutorial

a series tutorial for linux exploit development to newbie.

loki

Loki - Simple IOC and Incident Response Scanner

memprocfs

The Memory Process File System

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

micro8

Gitbook

movies-for-hackers

🎬 A curated list of movies every hacker & cyberpunk must watch.

new_xp_captcha

xp_CAPTCHA(白嫖版) burp 验证码 识别 burp插件

owasp-web-checklist

OWASP Web Application Security Testing Checklist

papers

Some papers about cyber security

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_note

渗透测试常规操作记录

pentest_study

从零开始内网渗透学习