843738141 Goto Github PK

awesome-oscp

A curated list of awesome OSCP resources

daily_moring

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hongduiziliao

红队渗透测试|攻防|学习|工具|分析|研究资料汇总

jpeg_rce

Exiftool bug which leads to RCE

linuxeelvation

Linux Eelvation(持续更新)

networksecurityself-study

这是作者的系列网络安全自学教程，主要是关于网安工具和实践操作的在线笔记，希望对大家有所帮助，学无止境，加油。

oscp

OSCP Cheat Sheet

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

proxy_pool

Python爬虫代理IP池(proxy pool)

python-deserialization-attack-payload-generator

Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpickle module is used for deserialization of serialized data. I will update it with more attack vectors to targets other modules.

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

systemsecurity-reverseanalysis

该资源为系统安全和逆向分析实验，包括作者从零学习恶意代码分析、病毒逆向分析的工具及样本，基础性文章，希望对您有所帮助~