tonghuaroot Goto Github PK

nuclei-docs

Nuclei documentation

nuclei-templates

Community curated list of templates for the nuclei engine to find a security vulnerability in the application.

omg2hei.github.io

TonghuaRoot's BloG.

oscp-survival-guide

Kali Linux Offensive Security Certified Professional Survival Exam Guide

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

一些内网渗透中常用的安全工具、命令收集。

phone_shop

一个售卖二手手机的电子商城

powershelldemo

A repo store some PowerShell script

printnightmare

project-layout

Standard Go Project Layout

projectetst

11

prowler

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

purplecloud

An Infrastructure as Code (IaC) deployment of a small Active Directory pentest lab in the cloud. The deployment simulates a semi-realistic corporate enterprise Active Directory with a DC and endpoints. Purple team goals include blue team detection capabilities and R&D for detection engineering new approaches.

pyscript

方便日常工作的Python脚本

red_team

Some scripts useful for red team activities

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

reshellaas

Reverse Shell as a Service

secauditer

安全技术热点聚合平台

secdev

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secresources

整理渗透测试常用payload、安全开发资源

sectool.go

security

About cyber security, data scrapy , aisec analysis, vulnerability analysis, enterprise security, and so on.

security-champions-playbook

Security Champions Playbook v 2.1

security_engineer_interview_questions

Every Security Engineer Interview Question From Glassdoor.com

securitypdf

Information Security Related PDF Document Collection and Arrangement

servicenow

ServiceNow widge-simple-list misconfiguration scanner

shhgit

Ah shhgit! Find GitHub secrets in real time

shiftleft-java-demo

smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️