RedPanda-Q's Stars
trimstray/the-book-of-secret-knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
fatedier/frp
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
AobingJava/JavaFamily
【Java面试+Java学习指南】 一份涵盖大部分Java程序员所需要掌握的核心知识。
googlehosts/hosts
镜像:https://scaffrey.coding.net/p/hosts/git / https://git.qvq.network/googlehosts/hosts
perklet/reverse-interview-zh
技术面试最后反问面试官的话
trustedsec/social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
tennc/webshell
This is a webshell open source project
github/codeql
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
urbanadventurer/WhatWeb
Next generation web scanner
qiyeboy/IPProxyPool
IPProxyPool代理池项目,提供代理ip
fengyuhetao/shell
Linux命令行与shell脚本编程大全案例
c0ny1/upload-labs
一个想帮你总结所有类型的上传漏洞的靶场
shack2/SNETCracker
超级弱口令检查工具是一款Windows平台的弱口令审计工具,支持批量多线程检查,可快速发现弱密码、弱口令账号,密码支持和用户名结合进行检查,大大提高成功率,支持自定义服务端口和字典。
olist213/Information_Security_Books
信息安全方面的书籍
sensepost/ruler
A tool to abuse Exchange services
inonshk/31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
Leezj9671/Pentest_Interview
个人准备渗透测试和安全面试的经验之谈,和去部分厂商的面试题,干货真的满满~
JohnTroony/php-webshells
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
NytroRST/NetRipper
NetRipper - Smart traffic sniffing for penetration testers
LangziFun/LangSrcCurise
SRC子域名资产监控
TideSec/Mars
Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等
safe6Sec/CodeqlNote
Codeql学习笔记
bit4woo/reCAPTCHA
reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件
heroanswer/XSS_Cheat_Sheet_2020_Edition
xss漏洞模糊测试payload的最佳集合 2020版
G-Security-Team/JS-Forward
前端参数加密渗透测试通用解决方案
chris408/ct-exposer
An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
Hzllaga/JsLoader
js免杀shellcode,绕过杀毒添加自启
rootkiter/EarthWorm
Tool for tunnel
mingongge/BestSRE
Linux 运维工程师打怪升级进阶成神之路
heroanswer/vulnerability_library
厂商未公开漏洞库