SuperXiaoxiong

SuperXiaoxiong's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python62.1k1.8k014.8k

• chaitin/xray

  一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

  Language:Vue10.5k2104721.8k

• redcanaryco/atomic-red-team

  Small and highly portable detection tests based on MITRE's ATT&CK.

  Language:C10k3512772.8k

• Mr-xn/Penetration_Testing_POC

  渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

  Language:HTML6.7k25772k

• 0xInfection/Awesome-WAF

  🔥 Web-application firewalls (WAFs) from security standpoint.

  Language:Python6.4k25961.1k

• KathanP19/HowToHunt

  Collection of methodology and test case for various web vulnerabilities.

  6.2k279191.8k

• Bypass007/Emergency-Response-Notes

  应急响应实战笔记，一个安全工程师的自我修养。

  5.3k13381.3k

• salesforce/ja3

  JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

  Language:Python2.8k9652293

• orangetw/My-CTF-Web-Challenges

  Collection of CTF Web challenges I made

  Language:PHP2.7k1424476

• Threezh1/JSFinder

  JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

  Language:Python2.7k2226407

• mandiant/red_team_tool_countermeasures

  Language:YARA2.7k24312846

• ComodoSecurity/openedr

  Open EDR public repository

  Language:C++2.3k10640455

• White-hua/Apt_t00ls

  高危漏洞利用工具

  Language:Java1.7k2814235

• Wh0ale/SRC-experience

  工欲善其事，必先利其器

  Language:HTML1.5k380324

• RedDrip7/APT_Digital_Weapon

  Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

  9038410245

• theori-io/pwnjs

  A Javascript library for browser exploitation

  Language:JavaScript874454108

• amazon-ion/ion-java

  Java streaming parser/serializer for Ion.

  Language:Java86739373111

• Arno0x/DNSExfiltrator

  Data exfiltration over DNS request covert channel

  Language:JavaScript853398182

• c0ny1/java-object-searcher

  java内存对象搜索辅助工具

  Language:Java79111685

• StrangerealIntel/CyberThreatIntel

  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

  Language:JavaScript707782136

• palantir/alerting-detection-strategy-framework

  A framework for developing alerting and detection strategies for incident response.

  7062950121

• 0x783kb/Security-Operation-Book

  常见的攻击行为监测特征及方法，涵盖端点和流量，未包含PowerShell和Sysmon。预祝运营生活愉快！

  612240139

• lilifengcode/Burpsuite-Plugins-Usage

  Burpsuite-Plugins-Usage

  Language:Java506113126

• T0xst/linux

  linux安全检查

  Language:Shell448147193

• chipik/SAP_RECON

  PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

  Language:Python21614464

• sv3nbeast/weblogic-framework

  weblogic-framework

  451081

• avicoder/WriteUp

  Collection of Some Good research Documentation

  27108

• secgroundzero/ossem_modular

  OSSEM Modular

  27505

• BytecodeDL/graphdb-intellij-plugin

  neo4j plugin of ByteCodeDL for the IntelliJ Platform. ByteCodeDL-Neo4j-IDEA-Plugin

  Language:Java16000

• SuperXiaoxiong/SuperXiaoxiong.github.io

  xiaoxiong's blog

  Language:SCSS9310