funhity Goto Github PK

my_doc

ngx-admin

Admin dashboard template based on Angular 7+, Bootstrap 4 (previously known as ng2-admin)

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙

nishang

Nishang - PowerShell for penetration testing and offensive security.

nodejs-learning-resources

Learning resources for Node.js

novnc

VNC client using HTML5 (Web Sockets, Canvas) with encryption (wss://) support.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

pasc2at-1

高级PHP应用程序漏洞审核技术 by 80vul

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

php7-internal

PHP7内核剖析

phpcodz

Php Codz Hacking

powershell-attack-guide

Powershell攻击指南----黑客后渗透之道

privesc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

recaptcha

A Burp Suite Extender that recognize CAPTCHA and use for intruder payload

secguide

面向开发人员梳理的代码安全指南

securitymanagement

分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴

securitymind

旨在通过分析企业信息安全建设过程中的心路历程 ，从技术、管理、治理等多个层面了解企业信息安全建设的不同阶段

shadowsocksx-ng-r8-bakup

Backup for ShadowsocksX-NG-R8.

sn1per

Automated Pentest Recon Scanner

spf

SpeedPhishing Framework

spr-mvc-hib

Spring MVC + Hibernate + Maven tutorial with all CRUD operations

spring-jndi

Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4

sqli-labs

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

struts-s2-xxx

整理收集Struts2漏洞环境

svn_git_scanner

用于扫描git，svn泄露

swagger-hack

自动化爬取并自动测试所有swagger接口

vulhub

Docker-Compose file for vulnerability environment