EvilAnne's Stars
byoungd/English-level-up-tips
An advanced guide to learn English which might benefit you a lot 🎉 . 离谱的英语学习指南/英语学习教程。
The-Run-Philosophy-Organization/run
润学全球官方指定GITHUB,整理润学宗旨、纲领、理论和各类润之实例;解决为什么润,润去哪里,怎么润三大问题; 并成为新**人的核心宗教,核心信念。
xaoyaoo/PyWxDump
获取微信信息;读取数据库,本地查看聊天记录并导出为csv、html等格式用于AI训练,自动回复等。支持多账户信息获取,支持所有微信版本。
erebe/wstunnel
Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available
docker-easyconnect/docker-easyconnect
使深信服(Sangfor)开发的非自由的 VPN 软件 EasyConnect 和 aTrust 运行在 docker 或 podman 中,并作为网关和/或提供 socks5、http 代理服务
ExpLangcn/NucleiTP
自动整合全网Nuclei的漏洞POC,实时同步更新最新POC!
Neo23x0/signature-base
YARA signature and IOC database for my scanners and tools
ine-labs/AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure
zmap/zgrab2
Fast Go Application Scanner
doyensec/inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
rootsecdev/Azure-Red-Team
Azure Security Resources and Notes
pushsecurity/saas-attacks
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
jayus0821/swagger-hack
自动化爬取并自动测试所有swagger接口
qwqdanchun/Pillager
Pillager是一个适用于后渗透期间的信息收集工具
Getshell/LinuxTQ
《Linux提权方法论》
PortSwigger/BChecks
BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition
SpecterOps/Nemesis
An offensive data enrichment pipeline
JKme/cube
内网渗透测试工具,弱密码爆破、信息收集和漏洞扫描
slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor
Smart contract audit skills roadmap for beginners, auditors, engineers, etc.
20142995/Goby
praetorian-inc/gato
GitHub Actions Pipeline Enumeration and Attack Tool
aws-samples/aws-customer-playbook-framework
This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.
blacklanternsecurity/badsecrets
A library for detecting known secrets across many web frameworks
Whoopsunix/JavaRce
Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式
frkngksl/NimExec
Fileless Command Execution for Lateral Movement in Nim
bytedance/vArmor
vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.
pathtofile/SealighterTI
Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider
cqr-cryeye-forks/goby-pocs
List of pocs for goby
blackberry/Falco-bypasses
Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).
hkcert-ctf/CTF-Challenges
Capture the flag challenges