lakemoon602's Stars
emo-crab/observer_ward
侦查守卫(observer_ward)Web应用和服务指纹识别工具
0xmaximus/Galaxy-Bugbounty-Checklist
Tips and Tutorials for Bug Bounty and also Penetration Tests.
readloud/ARL-NPoC
integrates vulnerability verification and task execution
F6JO/RouteVulScan
Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件
NSSL-SJTU/SaTC
A prototype of Shared-keywords aware Taint Checking, a novel static analysis approach that tracks the data flow of the user input between front-end and back-end to precisely detect security vulnerabilities.
NESA-Lab/FirmSecDataset
FirmSec Dataset
zer0yu/Awesome-CobaltStrike
List of Awesome CobaltStrike Resources
bitsadmin/wesng
Windows Exploit Suggester - Next Generation
Threekiii/Awesome-Redteam
一个攻防知识仓库 Red Teaming and Offensive Security
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
HQarroum/awesome-iot
🤖 A curated list of awesome Internet of Things projects and resources.
JonathanSalwan/Triton
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
angr/pyvex
Python bindings for Valgrind's VEX IR.
teamssix/awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源,该项目主要面向国内的安全人员
gh0stkey/Web-Fuzzing-Box
Web Fuzzing Box - Web 模糊测试字典与一些Payloads
tomnomnom/waybackurls
Fetch all the URLs that the Wayback Machine knows about for a domain
BuffaloWill/oxml_xxe
A tool for embedding XXE/XML exploits into different filetypes
s0md3v/be-a-hacker
roadmap for a self-taught hacker
s0md3v/Smap
a drop-in replacement for Nmap powered by shodan.io
antonio-morales/Fuzzing101
An step by step fuzzing tutorial. A GitHub Security Lab initiative
shadow1ng/fscan
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。
rtcatc/Packer-Fuzzer
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
client-pp/ProbetheProto
inonshk/31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
mstxq17/VunHunterTips
漏洞挖掘技巧及其一些工具集成
guchangan1/All-Defense-Tool
本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms、OA漏洞利用工具,爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
shadow1ng/ProxyPool
一款用于自动切换ip的代理池服务,无需任何依赖,能快速运行。
momosecurity/FindSomething
基于chrome、firefox插件的被动式信息泄漏检测工具
HackJava/HackJava
《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
lc/subjs
Fetches javascript file from a list of URLS or subdomains.