baixiaoyeer Goto Github PK

0sec-sign

零组文库签到

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

app_security

awesome-ios-security-cn

iOS安全资料整理（中文）

awesome-vehicle-security

🚗 A curated list of resources for learning about vehicle security and car hacking.

baixiaoyeer.github.io

baixiaoyeer_bolg

bash_script

在线一键操作脚本，生成力工具

binary_vulnerability

二进制漏洞之栈溢出原理和利用技术、绕过安全保护技术(绕过 NX、 ASLR、PIE、Canary、RELRO 等)、格式化字符串漏洞原理是利用技术、整数溢出漏 洞原理和利用技术、glibc2.30 内存管理源码深入分析、堆溢出漏洞(fastbin 攻击、 UAF、double free、堆重叠和扩展攻击、unlink 攻击、house 系列攻击)漏洞原理和攻 击技巧

burpa

Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used to setup Dynamic Application Security Testing (DAST).

cheetah-gui

Cheetah GUI

cmd_test

BAT TEST

emmmm

struts2系列漏洞，jboss，weblogic，webshell(爆破的方式),thinkphp5_rce....

exploitdb

The official Exploit Database repository

flash-linux0.11-talk

你管这破玩意叫操作系统源码 — 像小说一样品读 Linux 0.11 核心代码

geturls

URL采集器

github-cve-monitor

监控github上新增的cve编号项目漏洞和监控github发布工具更新，推送钉钉或者server酱

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

hello-world

个人的想法、分享的资源、讨论

infospider

INFO-SPIDER 是一个集众多数据源于一身的爬虫工具箱🧰，旨在安全快捷的帮助用户拿回自己的数据，工具代码开源，流程透明。支持数据源包括GitHub、QQ邮箱、网易邮箱、阿里邮箱、新浪邮箱、Hotmail邮箱、Outlook邮箱、京东、淘宝、支付宝、**移动、**联通、**电信、知乎、哔哩哔哩、网易云音乐、QQ好友、QQ群、生成朋友圈相册、浏览器浏览历史、12306、博客园、CSDN博客、开源**博客、简书。

k8s-nuclei-templates

Nuclei templates for K8S security scanning

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

linuxcheck

Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

paper

Web Security Technology & Vulnerability Analysis Whitepapers

perun

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

ppmap

A scanner/exploitation tool written in GO, which leverages Prototype Pollution to XSS by exploiting known gadgets.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

secguide

面向开发人员梳理的代码安全指南

security-guide-for-developers

Security Guide for Developers (实用性开发人员安全须知)