Hacker-One

Pinned Repositories

Bridge
无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。
Language:Java3 1 02
evilpdf
Embedding executable files in PDF Documents
Language:Shell2 1 02
fastjson_rce_tool
fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制
2 1 01
MSSQL_SQL_BYPASS_WIKI
MSSQL注入提权,bypass的一些总结
6 0 00
PHP-Audit-Labs
一个关于PHP的代码审计项目
Language:PHP3 1 02
Scanners-Box
A powerful hacker toolkit which collects more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
5 1 03
shiro_rce
shiro rce 反序列命令执行一键工具
2 1 01
SuperWordlist
基于实战沉淀下的各种弱口令字典
2 0 01
vulnerability-assessment-tool
Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://sap.github.io/vulnerability-assessment-tool/
Language:Java4 2 04
WindowsExploits
Windows Exploit List
Language:C++17 3 010

Hacker-One's Repositories

Hacker-One/Bridge
无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。
Language:Java3 1 02
Hacker-One/PHP-Audit-Labs
一个关于PHP的代码审计项目
Language:PHP3 1 02
Hacker-One/fastjson_rce_tool
fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制
2 1 01
Hacker-One/shiro_rce
shiro rce 反序列命令执行一键工具
2 1 01
Hacker-One/SuperWordlist
基于实战沉淀下的各种弱口令字典
2 0 01
Hacker-One/LangSrcCurise
SRC子域名资产监控
Language:Python1 0 0
Hacker-One/automactc
AutoMacTC: Automated Mac Forensic Triage Collector
Language:Python1 0
Hacker-One/collection-document
Collection of quality safety articles
0 0
Hacker-One/CS-checklist
PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist
1 0
Hacker-One/CVE-2019-11043
(PoC) Python version of CVE-2019-11043 exploit by neex
Language:Python1 01
Hacker-One/CVE-2019-7609
exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts
Language:Python1 0
Hacker-One/fastjson-1.2.60-rce
autoType enable
1 0
Hacker-One/GadgetProbe
Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
Language:Java1 0
Hacker-One/graudit
grep rough audit - source code auditing tool
Language:Shell1 01
Hacker-One/JDSRC-Small-Classroom
京东SRC小课堂系列文章
1 0
Hacker-One/jumpserver
Jumpserver是全球首款完全开源的堡垒机，是符合 4A 的专业运维审计系统。
Language:JavaScript1 0
Hacker-One/nps
一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。
Language:Go0 0
Hacker-One/openrasp
🔥Open source RASP solution
Language:C++1 0
Hacker-One/owasp-modsecurity-crs
OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
Language:Perl1 0
Hacker-One/PoCBox
PoCBox - 赏金猎人的脆弱性测试辅助平台（破300star写重构版本，400star免费线上版本开放【在线食用地址：由于经常被DDOS导致服务器资源恶意被占用费用过大决定关闭服务】，1000star开源重构全新版本！）
Language:JavaScript1 0
Hacker-One/reverse-shell
Reverse Shell as a Service
Language:JavaScript1 0
Hacker-One/seecode-scanner
SeeCode Scanner 扫描引擎
Language:Python1 0
Hacker-One/shiro-550-with-NoCC
奇安信北京攻防团队： Shiro-550 不依赖CC链利用工具
0 0
Hacker-One/Sn1per
Automated pentest framework for offensive security experts
Language:Shell0 0
Hacker-One/SpringBootVulExploit
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist
Language:Java1 0
Hacker-One/taro
开放式跨端跨框架解决方案，支持使用 React/Vue/Nerv 等框架来开发微信/京东/百度/支付宝/字节跳动/ QQ 小程序/H5 等应用。 https://taro.jd.com/
Language:JavaScript1 0
Hacker-One/TPscan
一键ThinkPHP漏洞检测
Language:Python1 0
Hacker-One/wordpress-exploit-framework
A Ruby framework designed to aid in the penetration testing of WordPress systems.
Language:Ruby1 0
Hacker-One/wpscan
WPScan is a free, for non-commercial use, black box WordPress Vulnerability Scanner written for security professionals and blog maintainers to test the security of their WordPress websites.
Language:Ruby0 0
Hacker-One/xray-crack
xray社区高级版证书生成，仅供学习研究，正常使用请支持正版
Language:Go0 0