liao545 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

aliyunaccesskeytools

阿里云AccessKey泄漏利用工具

attifyos

Attify OS - Distro for pentesting IoT devices

awesome-exploit

一个漏洞利用工具仓库

berserker

A list of useful payloads for Web Application Security and Pentest/CTF

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

chatgpt-codereview

这是一个调用chatGPT进行代码审计的工具

codeqlpy

CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。

crowsec

视频课件和工具分享

cve-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

electricrat

电气鼠靶场系统是一种带有漏洞的Web应用程序，旨在为Web安全渗透测试学习者提供学习和实践的机会。The Electrical Mouse Target Range System is a web application with vulnerabilities designed to provide learning and practice opportunities for web security penetration testing learners.

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fastjson

Fastjson姿势技巧集合

fuzz.txt

Potentially dangerous files

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gitalk

Gitalk is a modern comment component based on Github Issue and Preact.

hexo-comment

博客评论

javaweb-sec

liao545.github.io

blog项目

meppo

漏洞检测框架 Meppo | By WingsSec

nuclei-templates-collection

Nuclei Templates Collection

ola

ola

peiqi-wiki-book

面向网络安全从业者的知识文库🍃

project-based-learning

Curated list of project-based tutorials

secscan-authcheck

越权检测工具

securitylist

A list for Web Security and Code Audit

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

sql-injection-bypass

记录实战中的各种sql注入绕过姿势

templatesallnuclei

This includes all the templates of nuclei collected from different sources