liansweb Goto Github PK

-

令人敬畏的红色团队/红色团队资源列表 此列表适用于任何希望了解红色团队但没有起点的人。

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

aggregate-paper

文章聚合

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apisecurityinaction

Source code that accompanies the book API Security in Action

apisix-docker

the docker for Apache APISIX

awesome-redteam

一个攻防知识仓库 Red Teaming and Offensive Security

bienaoccc_hym

收集各种薅羊毛脚本

bugbountytricks

「🐞」Bug Bounty Tricks

cf

Cloud Exploitation Framework 云环境利用框架，方便红队人员在获得 AK 的后续工作

chinese-security-rss

网络安全资讯的RSS订阅，网络安全博客的RSS订阅，网络安全公众号的RSS订阅

cve-2021-26086

Atlassian Jira Server/Data Center 8.4.0 - Arbitrary File read (CVE-2021-26086)

cve-2022-24112

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

data-example

大数据学习历程相关代码

devbooks

Development Books

fastjson

Fastjson姿势技巧集合

ffuf

Fast web fuzzer written in Go

fuzzdicts

渗透测试路径字典，爆破字典。内容来自互联网和实战积累。

goby-pocs

List of pocs for goby

jndi-injection-exploit-plus

50+ Gadgets(17 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

katana

A next-generation crawling and spidering framework.

lanproxy

lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具，支持tcp流量转发，可支持任何tcp上层协议（访问内网网站、本地支付接口调试、ssh访问、远程桌面、http代理、https代理、socks5代理...）。技术交流QQ群 736294209

liansweb

memshell

a webshell resides in the memory of java web server

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

papernotes

经典论文

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

publearnnotes

大数据学习笔记

rce

storage script