xiangpasama's Stars
wolfwhoami/SecurityManagement
分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴
The-Art-of-Hacking/h4cker
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
FeeiCN/GSIL
GitHub Sensitive Information Leakage(GitHub敏感信息泄露监控)
luck-ying/Library-POC
基于Pocsuite3、goby编写的漏洞poc&exp存档
Hack-with-Github/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
Hacker0x01/hacker101
Source code for Hacker101.com - a free online web and mobile security class.
p1g3/JSINFO-SCAN
递归式寻找域名和api。
crow821/vulntarget
vulntarget靶场系列
G3et/Search_Viewer
集Fofa、Hunter鹰图、Shodan、360 quake、Zoomeye 钟馗之眼、censys 为一体的空间测绘gui图形界面化工具,支持一键采集爬取和导出fofa、shodan等数据,方便快捷查看
pingc0y/URLFinder
一款快速、全面、易用的页面信息提取工具,可快速发现和提取页面中的JS、URL和敏感信息。
w-digital-scanner/w13scan
Passive Security Scanner (被动式安全扫描器)
tide-emergency/yingji
应急相关内容积累
WingsSec/Meppo
漏洞检测框架 Meppo | By WingsSec
3xp10it/xwaf
Automatic bypass (brute force) waf
LandGrey/pydictor
A powerful and useful hacker dictionary builder for a brute-force attack
ghealer/TaoTie
一个收集优秀攻防工具的项目,集百家之所长,融百家之所思,扬百家之所名
ghealer/GUI_Tools
一个由各种图形化渗透工具组成的工具集
guchangan1/All-Defense-Tool
本项目集成了全网优秀的攻防武器工具项目,包含自动化利用,子域名、目录扫描、端口扫描等信息收集工具,各大中间件、cms、OA漏洞利用工具,爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
zhzyker/dismap
Asset discovery and identification tools 快速识别 Web 指纹信息,定位资产类型。辅助红队快速定位目标资产信息,辅助蓝队发现疑似脆弱点
xiecat/goblin
一款适用于红蓝对抗中的仿真钓鱼系统
shadow1ng/fscan
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。
Qianlitp/WatchAD-Web
A simple web platform for WatchAD
Lucifer1993/struts-scan
Python2编写的struts2漏洞全版本检测和利用工具
0Kee-Team/CatchMail
CatchMail can be used to find some email addresses!
Qianlitp/crawlergo
A powerful browser crawler for web vulnerability scanners
feihong-cs/ShiroExploit-Deprecated
Shiro550/Shiro721 一键化利用工具,支持多种回显方式
android-hacker/VirtualXposed
A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.
cpkkcb/fuzzDicts
渗透测试路径字典,爆破字典。内容来自互联网和实战积累。
restsharp/RestSharp
Simple REST and HTTP API Client for .NET
ym2011/SecurityTechnique
Security technique research and some funny work on it !