Liam-Zz's Stars
gh0stkey/CaA
CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.
biggerduck/RedTeamNotes
红队笔记
Y4tacker/JavaSec
a rep for documenting my study, may be from 0 to 0.1
M1k0er/pentest-notes
记录自己在内网渗透学习中的一些心得和技巧,不定期记录中:)
guchangan1/All-Defense-Tool
本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms、OA漏洞利用工具,爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
Mr-xn/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
BishopFox/sliver
Adversary Emulation Framework
j3ers3/Hello-Java-Sec
☕️ Java Security,安全编码和代码审计
Maskhe/javasec
自己学习java安全的一些总结,主要是安全审计相关
HackJava/HackJava
《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
wustrive2008/aes-rsa-java
AES+RSA结合应用java示例
GerbenJavado/LinkFinder
A python script that finds endpoints in JavaScript files
projectdiscovery/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
maurosoria/dirsearch
Web path scanner
juliocesarfort/public-pentesting-reports
A list of public penetration test reports published by several consulting firms and academic security groups.
ffuf/ffuf
Fast web fuzzer written in Go
Tuziang/tomcat-java-web
tomcat与java web开发技术详解 第三版 源代码
gh0stkey/HaE
HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.
ReAbout/web-sec
WEB安全手册(红队安全技能栈),漏洞理解,漏洞利用,代码审计和渗透测试总结。【持续更新】
vanhauser-thc/thc-hydra
hydra
upx/upx
UPX - the Ultimate Packer for eXecutables
Threekiii/Awesome-Redteam
一个攻防知识仓库 Red Teaming and Offensive Security
sleeyax/burp-awesome-tls
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
epinna/weevely3
Weaponized web shell
tennc/webshell
This is a webshell open source project
pingc0y/URLFinder
一款快速、全面、易用的页面信息提取工具,可快速发现和提取页面中的JS、URL和敏感信息。
djytmdj/Tool_Summary
网络安全测试工具汇总,包含漏洞库、漏洞利用工具、漏洞扫描工具、密码读取工具、中间件利用工具、内网渗透工具。cs、burp、浏览器插件工具、字典等
rutkai/pentest-bookmarks
A collection of penetration testing related sites
A-poc/RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing