a1124510616 Goto Github PK

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

ocr-recon

This tool is useful to find a particular string in a list of URLs using tesseract's OCR (Optical Character Recognition) capabilities

oh365userfinder

Python3 o365 User Enumeration Tool

oneforall

OneForAll是一款功能强大的子域收集工具

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

penetration-script

渗透测试脚本，为防忘记开设（垃圾桶）

penetrationtest-tips

渗透测试，渗透测试小技巧，渗透测试Tips，师傅们跟我一起维护更新吧~

pentest-tools

pentest_note

渗透测试常规操作记录

pentesthandbook

渗透测试手册

poc-collection

poc-collection 是对 github 上公开的 PoC 进行收集的一个项目。

poc-exploits

Select proof-of-concept exploits for software vulnerabilities to aid in identifying and testing vulnerable systems.

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

postgresql_udf_help

PostgreSQL 提权辅助脚本

protocol-vul

Some Vulnerability in the some protocol are collected.

proxyshell

Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207

pwntools

CTF framework and exploit development library

qingscan

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

rsshub

🍰 Everything is RSSible

safety-magazine

《黑客防线》、《安全参考》、《书安》安全杂志电子版以及陈小兵老哥的《安天365专题研究》

saucerframe

python3批量poc检测工具

sec-admin

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

shiroattack2

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

shortpayload

通过字节码相关的技术，将Java反序列化Payload进行极致缩小，最高可以达到64.8%的缩小比例

siusiu

一款基于docker的渗透测试工具箱，致力于做到渗透工具随身携带、开箱即用。减少渗透测试工程师花在安装工具、记忆工具使用方法上的时间和精力。

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

some-poc-or-exp

各种漏洞poc、Exp的收集或编写