Pinned Repositories
1000php
1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
3snake
Tool for extracting information from newly spawned processes
android-apktool
Automatically exported from code.google.com/p/android-apktool
android_app_security_checklist
Android App Security Checklist
AngelSword
Python3编写的CMS漏洞检测框架
apache-struts2-CVE-2017-5638
Demo Application and Exploit
API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
pentest-bookmarks
Automatically exported from code.google.com/p/pentest-bookmarks
timger-book
Automatically exported from code.google.com/p/timger-book
lnln1111's Repositories
lnln1111/pentest-bookmarks
Automatically exported from code.google.com/p/pentest-bookmarks
lnln1111/android_app_security_checklist
Android App Security Checklist
lnln1111/AngelSword
Python3编写的CMS漏洞检测框架
lnln1111/apache-struts2-CVE-2017-5638
Demo Application and Exploit
lnln1111/API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
lnln1111/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
lnln1111/Benchmarks
常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org
lnln1111/blackhat-arsenal-tools
Black Hat Arsenal Tools Official Account
lnln1111/burplugin-java-rce
******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python类库 如果初始化失败请按照如下步骤安装类库， 1、执行 $[python]/Scrips/easy_install pip 2、requests模块 安装方法 pip install requests 3、termcolor模块安装方法： pip install termcolor github: https://github.com/bigsizeme/java-rce-tools burpsuite源码地址：https://github.com/bigsizeme/burplugin-java-rce
lnln1111/check_py
**网络安全技术对抗赛代码
lnln1111/CTF_web
a project aim to collect CTF web practices .
lnln1111/doublepulsar-detection-script
A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
lnln1111/EQGRP
Decrypted content of eqgrp-auction-file.tar.xz
lnln1111/EQGRP_Lost_in_Translation
Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
lnln1111/gocrack
lnln1111/jexboss
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
lnln1111/jg
极光导出word
lnln1111/kernel-exploits
A bunch of proof-of-concept exploits for the Linux kernel
lnln1111/leakPasswd
Python 密码泄露查询模块
lnln1111/logtamper
python修改linux日志
lnln1111/NagaScan
NagaScan is a distributed passive scanner for Web application.
lnln1111/PubilcAssetInfo
以甲方安全人员的视角，尽可能收集发现企业的域名和服务器公网IP资产
lnln1111/PublicMonitors
对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险
lnln1111/PublicSecScan
针对大量WEB资产进行分布式WEB安全扫描，发现web环境下常规的一些安全漏洞
lnln1111/pydictor
A powerful and useful hacker dictionary builder for a brute-force attack
lnln1111/security-guide-for-developers
Security Guide for Developers (实用性开发人员安全须知)
lnln1111/V3n0M-Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
lnln1111/vmware_escape
VMware Escape Exploit before VMware WorkStation 12.5.5
lnln1111/vulhub
Docker-Compose file for vulnerability environment
lnln1111/Web-Security-Learning
Web-Security-Learning