awesome-web-security-

Some resource is useful..

beaconeye

Hunts out CobaltStrike beacons and logs operator command output

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

chardet

Python character encoding detector

cms-hunter

CMS漏洞测试用例集合

d1nfinite

d1nfinite.github.io

blog

dnscache

A dns cache for Go that support custom dns server

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cross-platform CobaltStrike Beacon bypass anti-virus, supports 4.1+ version.

go-icmpshell

一款基于 gopacket 编写的 ICMP 反弹 shell 工具

go-zydis

Zydis Bindings for Go

golang-reverseshell

golang-reverseshell

gons

simple and graceful golang netstat library

gopom

A maven pom.xml parser written in Go.

inv

Inv是一款擦除Linux入侵痕迹的工具

java-sec-code

Java常见通用漏洞和修复的代码以及利用payload

jenkins-demo

landscape

🌄 The Cloud Native Interactive Landscape filters and sorts hundreds of projects and products, and shows details including GitHub stars, funding or market cap, first and last commits, contributor counts, headquarters location, and recent tweets.

libbpf-bootstrap

Scaffolding for BPF application development with libbpf and BPF CO-RE

netcat

python netcat

offensivepipeline

OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

powercat

netshell features all in version 2 powershell

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

sec-interview

信息安全面试题汇总

shcheck

Just a small tool to check security headers

shellcodeframework

绕3环的shellcode免杀框架

trivy-action

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

vuln-list-update

web-security-learning

Web-Security-Learning

zhttp

zhttp是一个对net/http标准库的封装，参考了python中著名的requests库