Pinned Repositories
3y
:notebook:从Java基础、JavaWeb基础到常用的框架再到面试题都有完整的教程，几乎涵盖了Java后端必备的知识点
404StarLink-Project
Focus on promoting the evolution of tools in different aspects of security research.专注于推动安全研究各个领域工具化.
api-gateway-demo-sign-java
aliyun api gateway request signature demo by java
ARL
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
awesome-manga
Manga resources for manga fans 漫画爱好者的实用资源合集
blocklist-ipsets
ipsets dynamically updated with firehol's update-ipsets.sh script
BlueLotus_XSSReceiver
XSS平台 CTF工具 Web安全工具
BookSystem
学习Servlet+JSP写的比较完整的项目：图书管理系统
BurpShiroPassiveScan
一款基于BurpSuite的被动式shiro检测插件
xiaobaicaicaicai's Repositories
xiaobaicaicaicai/OneForAll
OneForAll是一款功能强大的子域收集工具
xiaobaicaicaicai/ARL
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。
xiaobaicaicaicai/blocklist-ipsets
ipsets dynamically updated with firehol's update-ipsets.sh script
xiaobaicaicaicai/BurpShiroPassiveScan
一款基于BurpSuite的被动式shiro检测插件
xiaobaicaicaicai/BurpSuite
Burp Suite loader version --> ∞
xiaobaicaicaicai/Cloud-OJ
微服务架构的 Online Judge.
xiaobaicaicaicai/CMWTAT_Digital_Edition
CloudMoe Windows 10 Activation Toolkit get digital license, the best open source Win 10 activator in GitHub. GitHub 上最棒的开源 Win10 数字权利（数字许可证）激活工具！
xiaobaicaicaicai/ddddocr
带带弟弟 通用验证码识别OCR pypi版
xiaobaicaicaicai/EHole
EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具
xiaobaicaicaicai/fscan
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。
xiaobaicaicaicai/GitDorker
A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
xiaobaicaicaicai/Glass
Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。
xiaobaicaicaicai/GSIL
GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）
xiaobaicaicaicai/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
xiaobaicaicaicai/HaE
HaE - BurpSuite Highlighter and Extractor
xiaobaicaicaicai/Havoc
The Havoc Framework
xiaobaicaicaicai/httpx
httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
xiaobaicaicaicai/java-jwt
Java implementation of JSON Web Token (JWT)
xiaobaicaicaicai/jsslkeylog
Java Agent Library to log SSL session keys to a file for Wireshark
xiaobaicaicaicai/Learn-Web-Hacking
Study Notes For Web Hacking / Web安全学习笔记
xiaobaicaicaicai/ohmyzsh
🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.
xiaobaicaicaicai/pydictor
A powerful and useful hacker dictionary builder for a brute-force attack
xiaobaicaicaicai/quarkus-quickstarts
Quarkus quickstart code
xiaobaicaicaicai/Re2Pcap
xiaobaicaicaicai/rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
xiaobaicaicaicai/seeyon-oa-exp
致远oa文件上传getshell，可批量。
xiaobaicaicaicai/sql-generator
🔨 用 JSON 来生成结构化的 SQL 语句，基于 Vue3 + TypeScript + Vite + Ant Design + MonacoEditor 实现，项目简单（重逻辑轻页面）、适合练手~
xiaobaicaicaicai/SSRF-Testing
SSRF (Server Side Request Forgery) testing resources
xiaobaicaicaicai/TideFinger
TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。
xiaobaicaicaicai/vulbase
各大漏洞文库合集