Pinned Repositories
2022-HW-POC
2022 护网行动 POC 整理
BurpSuite-collections
BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦
butterfly.js.org
Butterfly 的文檔/ Demo 倉庫
dirsearch
Web path scanner
FastjsonExploit
Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
ma
Mac_Tools
为了方便Mac用户参与渗透工作而创建的项目
Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
pentest-note
渗透测试☞经验/思路/想法/总结/笔记
yaspy's Repositories
yaspy/BurpSuite-collections
BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦
yaspy/pentest-note
渗透测试☞经验/思路/想法/总结/笔记
yaspy/2022-HW-POC
2022 护网行动 POC 整理
yaspy/butterfly.js.org
Butterfly 的文檔/ Demo 倉庫
yaspy/dirsearch
Web path scanner
yaspy/FastjsonExploit
Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）
yaspy/fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
yaspy/ma
yaspy/Mac_Tools
为了方便Mac用户参与渗透工作而创建的项目
yaspy/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
yaspy/cobaltstrike4.4_cdf
cobaltstrike4.x版本破解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子认证
yaspy/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
yaspy/RedTeam_BlueTeam_HW
红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具
yaspy/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
yaspy/smzdm_bot
什么值得买每日签到脚本
yaspy/test
yaspy/winex
test2