tomyang9 Goto Github PK

safewiki

WgpSec SafeWiki

safewikidev

sandboxie

The Sandboxie application

sap-memory-pipes-desynchronization-vulnerability-mpi-cve-2022-22536

satansword

红队综合渗透框架

sc-100-microsoft-cybersecurity-architect

sc-200t00a-microsoft-security-operations-analyst

sc-300-identity-and-access-administrator

sc-400

sc-400t00a-microsoft-information-protection-administrator

scantron

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scpa

sophisticated cyber penetratiom attacks is a series of advanced techniques, notes and guidance to prepare u in ur career as a hacker moving forward

secguide

面向开发人员梳理的代码安全指南

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secmind

安全导图

secscan-authcheck

越权检测工具

security-ppt

Security-related Slide Presentation（大安全各领域各公司各会议分享的PPT）

securitytips

sentinel-queries

Collection of KQL queries

server

PanDownload的个人维护版本

shadow2

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpproxylogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

sharpsqldump

内网渗透中快速获取数据库所有库名，表名，列名。具体判断后再去翻数据，节省时间。适用于mysql，mssql。

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

sifter

Sifter is a OSINT, recon & vulnerability scanner. It incorporates a plethara of tools within different module sets that tries to cover every attack vector. Allowing you to quickly perform recon tasks and organize the results in one place. From OSINT to Recon, Exploitation, Post-Exploitation, OpSec, Threat Analysis, XSS, SQLinjection, Network Scanning, WebApp Analysis or DNS enumeration.. Sifter should be able to cover it all.

slipstream

smug_fu3k

software-engineering-at-google

《Software Engineering at Google》的中文翻译版本