Pinned Repositories
0sec-Sign
零组文库签到
antispy
AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
awesome-ios-security-cn
iOS安全资料整理（中文）
awesome-vehicle-security
🚗 A curated list of resources for learning about vehicle security and car hacking.
baixiaoyeer.github.io
An electron floating between reality and virtuality, either static or stirring ~
Bash_Script
在线一键操作脚本，生成力工具
binary_vulnerability
二进制漏洞之栈溢出原理和利用技术、绕过安全保护技术(绕过 NX、 ASLR、PIE、Canary、RELRO 等)、格式化字符串漏洞原理是利用技术、整数溢出漏 洞原理和利用技术、glibc2.30 内存管理源码深入分析、堆溢出漏洞(fastbin 攻击、 UAF、double free、堆重叠和扩展攻击、unlink 攻击、house 系列攻击)漏洞原理和攻 击技巧
burpa
Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).
CMD_test
BAT TEST
emmmm
struts2系列漏洞，jboss，weblogic，webshell(爆破的方式),thinkphp5_rce....
baixiaoyeer's Repositories
baixiaoyeer/0sec-Sign
零组文库签到
baixiaoyeer/antispy
AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
baixiaoyeer/awesome-ios-security-cn
iOS安全资料整理（中文）
baixiaoyeer/awesome-vehicle-security
🚗 A curated list of resources for learning about vehicle security and car hacking.
baixiaoyeer/baixiaoyeer.github.io
An electron floating between reality and virtuality, either static or stirring ~
baixiaoyeer/Bash_Script
在线一键操作脚本，生成力工具
baixiaoyeer/binary_vulnerability
二进制漏洞之栈溢出原理和利用技术、绕过安全保护技术(绕过 NX、 ASLR、PIE、Canary、RELRO 等)、格式化字符串漏洞原理是利用技术、整数溢出漏 洞原理和利用技术、glibc2.30 内存管理源码深入分析、堆溢出漏洞(fastbin 攻击、 UAF、double free、堆重叠和扩展攻击、unlink 攻击、house 系列攻击)漏洞原理和攻 击技巧
baixiaoyeer/burpa
Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).
baixiaoyeer/CMD_test
BAT TEST
baixiaoyeer/exploitdb
The official Exploit Database repository
baixiaoyeer/flash-linux0.11-talk
你管这破玩意叫操作系统源码 — 像小说一样品读 Linux 0.11 核心代码
baixiaoyeer/github-cve-monitor
监控github上新增的cve编号项目漏洞和监控github发布工具更新，推送钉钉或者server酱
baixiaoyeer/HackReport
渗透测试报告/资料文档/渗透经验文档/安全书籍
baixiaoyeer/InfoSpider
INFO-SPIDER 是一个集众多数据源于一身的爬虫工具箱🧰，旨在安全快捷的帮助用户拿回自己的数据，工具代码开源，流程透明。支持数据源包括GitHub、QQ邮箱、网易邮箱、阿里邮箱、新浪邮箱、Hotmail邮箱、Outlook邮箱、京东、淘宝、支付宝、**移动、**联通、**电信、知乎、哔哩哔哩、网易云音乐、QQ好友、QQ群、生成朋友圈相册、浏览器浏览历史、12306、博客园、CSDN博客、开源**博客、简书。
baixiaoyeer/k8s-nuclei-templates
Nuclei templates for K8S security scanning
baixiaoyeer/keyhacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
baixiaoyeer/LinuxCheck
Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查
baixiaoyeer/nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
baixiaoyeer/ppmap
A scanner/exploitation tool written in GO, which leverages Prototype Pollution to XSS by exploiting known gadgets.
baixiaoyeer/public-pentesting-reports
Curated list of public penetration test reports released by several consulting firms and academic security groups
baixiaoyeer/Seatbelt
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
baixiaoyeer/secguide
面向开发人员梳理的代码安全指南
baixiaoyeer/security-guide-for-developers
Security Guide for Developers (实用性开发人员安全须知)
baixiaoyeer/SecurityTips
baixiaoyeer/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
baixiaoyeer/VulSpiderX
本程序在后台持续运行，通过headless chrome获取hackerone最新漏洞，发送邮件给安全人员。
baixiaoyeer/x-ui
支持多协议多用户的 xray 面板
baixiaoyeer/chatgpt-on-wechat
基于大模型搭建的聊天机器人，同时支持 微信公众号、企业微信应用、飞书、钉钉 等接入，可选择GPT3.5/GPT-4o/GPT4.0/ Claude/文心一言/讯飞星火/通义千问/ Gemini/GLM-4/Claude/Kimi/LinkAI，能处理文本、语音和图片，访问操作系统和互联网，支持基于自有知识库进行定制企业智能客服。
baixiaoyeer/TheRoadOfSO
学习安全运营的记录 | The knowledge base of security operation
baixiaoyeer/woodpecker-framework-release
高危漏洞精准检测与深度利用框架