cyjaysun's Stars
mandiant/red_team_tool_countermeasures
JE2Se/AssetScan
资产探测工具,检测存活,检测风险端口,常规端口,全端口探测等等,对探测的端口的脆弱面进行安全分析进行
TideSec/Mars
Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等
LangziFun/LangSrcCurise
SRC子域名资产监控
rebeyond/Behinder
“冰蝎”动态二进制加密网站管理客户端
FeeiCN/Cobra
Source Code Security Audit (源代码安全审计)
FeeiCN/Security-PPT
Security-related Slide Presentation & Security Research Report(大安全各领域各公司各会议分享的PPT以及各类安全研究报告)
jiji262/wooyun_articles
drops.wooyun.org 乌云Drops文章备份
EtherDream/jsproxy
An online proxy based on ServiceWorker
chaitin/xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
knownsec/RD_Checklist
知道创宇研发技能表
bipabo1l/ssrf_scan
多线程批量扫描ssrf漏洞
fupinglee/MyPython
一些常用的Python脚本
arnolix/openbilibili
哔哩哔哩后台源码
QAX-A-Team/redis_lua_exploit
ImageTragick/PoCs
Proof of Concepts for CVE-2016–3714
nimia/public_drown_scanner
liuzhida/who
WooYun/TangScan
TangScan
AonCyberLabs/PadBuster
Automated script for performing Padding Oracle attacks
zt2/sqli-hunter
SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
davexpro/FuzSub
A Tool For Fuzzing Sub-domain.
ring04h/weakfilescan
动态多线程敏感信息泄露检测工具
HIT-Alibaba/intro_HTTPS
阿里例会,HTTPS简介
HIT-Alibaba/interview
笔试面试知识整理
manning23/MSpider
Spider