free-me,github

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

360kg

ant

实时上线的 XSS 盲打平台

appinfo

爬取app市场制定应用

aqpt

ary

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

asset-scan

asset-scan是一款适用甲方企业的外网资产周期性扫描监控系统

attackwebframeworktools-5.0

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

awesome-hacking

awesome hacking chinese version

awesome-hacking-1

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-mobile-ctf

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awesomexss

Awesome XSS stuff

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

burpsuite

BurpSuite using the document and some extensions

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cheatsheets

Helped during my OSCP lab days.

cmsidentification

多模式cms识别脚本

collection-document

优质安全 list

ctf

Some solutions of "capture the flag" challenges

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.