Pinned Repositories
1000php
1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
Active-Directory-Pentest-Notes
个人域渗透学习笔记
Allscanner
数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
awesome-web-security
🐶 A curated list of Web Security materials and resources.
BBScan
A tiny Batch weB vulnerability Scanner
Blasting_dictionary
爆破字典
curated-wordlists
A monorepo of useful wordlists for security testing, updated from their original sources daily via GitHub Actions.
fuzzdb
一个fuzzdb扩展库
nishang
Nishang - PowerShell for penetration testing and offensive security.
webshell
This is a webshell open source project
Funhity's Repositories
Funhity/curated-wordlists
A monorepo of useful wordlists for security testing, updated from their original sources daily via GitHub Actions.
Funhity/Active-Directory-Pentest-Notes
个人域渗透学习笔记
Funhity/Allscanner
数据库和其他服务的弱端口的弱口令检测以及未授权访问的集成检测工具。 Weak password blasting of weak ports and integrated detection tools for unauthorized access.
Funhity/bypass_waf
waf自动爆破(绕过)工具
Funhity/CS-checklist
PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist
Funhity/Decrypt_Weblogic_Password
搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。
Funhity/Dictionary-Of-Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Funhity/exercise
Funhity/exploit
一个自动化渗透框架
Funhity/fancyss
fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.
Funhity/Interview-Notebook
:books: 技术面试需要掌握的基础知识整理
Funhity/iOS-11.1.2-15B202-Jailbreak
iOS 11.1.2 (15B202) Jailbreak
Funhity/iOSREBook
《iOS应用逆向与安全》随书源码
Funhity/IPASign
Tool to update the provisioning profile and resign the IPA file
Funhity/Java-Web-Security
Java-Web-Security - Sichere Webanwendungen mit Java entwickeln
Funhity/MiscSecNotes
some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building
Funhity/my_crawler
Funhity/my_doc
Funhity/myCVE
my CVE list
Funhity/ngx-admin
Admin dashboard template based on Angular 7+, Bootstrap 4 (previously known as ng2-admin)
Funhity/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Funhity/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Funhity/PentesterSpecialDict
渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker
Funhity/reCAPTCHA
A Burp Suite Extender that recognize CAPTCHA and use for intruder payload
Funhity/secguide
面向开发人员梳理的代码安全指南
Funhity/SecurityManagement
分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴
Funhity/SecurityMind
旨在通过分析企业信息安全建设过程中的心路历程 ，从技术、管理、治理等多个层面了解企业信息安全建设的不同阶段
Funhity/SSRF-Testing
SSRF (Server Side Request Forgery) testing resources
Funhity/Struts-S2-xxx
整理收集Struts2漏洞环境
Funhity/swagger-hack
自动化爬取并自动测试所有swagger接口