mirping Goto Github PK

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2018-2628

cve-2018-2629

CVE-2018-2628

daliy-record

docker-compose-django-postgresql-redis-example

Django + Postgres + Redis + Celery + Celery Beat + WebSocket server

docker-django

使用 Docker 部署 Django web 应用

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

machine_learning_security

Source code about machine learning and security.

monitor

The new Cuckoo Monitor.

nagascan

NagaScan is a distributed passive scanner for Web application.

netripper

NetRipper - Smart traffic sniffing for penetration testers

official-website

企业官方网站模板（响应式）

official-website-html

企业官网模板html，公司官网模板，单页bootstrap官网模板

payloads

Git All the Payloads! A collection of web attack payloads.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

python-gitlab

Python wrapper for the GitLab API

robotsdisallowed

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

scansql

利用sqlmap和URL去重的爬虫写的一个大规模扫描的脚本

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

shell_script

一键安装 shadowsocks，支持 chacha20-ietf-poly1305 加密方式

subdomainsbrute

A fast sub domain brute tool for pentesters

wooyun_public

乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

xsec-ip-database

xsec-ip-database为一个恶意IP和域名库（Malicious ip database）

xsstrike

XSStrike is a program which can crawl, fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs.