Pinned Repositories
ARL
ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
Blasting_dictionary
爆破字典
blazehttp
BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.
d-eyes
D-Eyes为M-SEC社区一款检测与响应工具
Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
EXP
Exploit-Dictionary
frp
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
generative-ai-for-beginners
18 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/
GitHack
A `.git` folder disclosure exploit
happystjava's Repositories
happystjava/ARL
ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
happystjava/Blasting_dictionary
爆破字典
happystjava/blazehttp
BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.
happystjava/d-eyes
D-Eyes为M-SEC社区一款检测与响应工具
happystjava/Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
happystjava/EXP
happystjava/Exploit-Dictionary
happystjava/frp
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
happystjava/generative-ai-for-beginners
18 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/
happystjava/GitHack
A `.git` folder disclosure exploit
happystjava/joomscan
OWASP Joomla Vulnerability Scanner Project
happystjava/Kali-Windows
Kali Windows
happystjava/KeyTabExtract
Extracts Key Values from .keytab files
happystjava/pentest-wiki
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
happystjava/Intranet_Penetration_Tips
2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~
happystjava/Powershell_fisher
利用powershell收集用户浏览器中保存的密码，桌面办公文件，电脑硬件软件信息。发送到指定邮件
happystjava/prism-trojan
棱镜后门
happystjava/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
happystjava/Security_Codes
个人安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档
happystjava/Seth
Perform a MitM attack and extract clear text credentials from RDP connections
happystjava/ThinkPHP-Vuln
关于ThinkPHP框架的历史漏洞分析集合
happystjava/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
happystjava/WebLogicPasswordDecryptorUi
解密weblogic AES或DES加密方法
happystjava/Writeups
国内各大CTF赛题及writeup整理
happystjava/wydomain
to discover subdomains of your target domain
happystjava/xray
xray 安全评估工具
happystjava/xssprobe
xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.