topsec-bunney Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

allin

A flexible scanner

bunney.github.io

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

cms1

SS CMS 基于 .NET Core，能够以最低的成本、最少的人力投入在最短的时间内架设一个功能齐全、性能优异、规模庞大并易于维护的网站平台。

cnvd-2020-10487-tomcat-ajp-lfi-scanner

Cnvd-2020-10487 / cve-2020-1938, scanner tool

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

disclosures

ffuf

Fast web fuzzer written in Go

firekylin

🔥火麒麟-网络安全应急响应工具(系统痕迹采集)Cybersecurity emergency response tool.👍👍👍

hack_tools

黑客工具库

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

mkdocs-material

Documentation that simply works

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

rsshub

🍰 Everything is RSSible

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

shiroexploit-deprecated

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

solr-ssrf

Apache Solr SSRF(CVE-2021-27905)

struts2-scan

Struts2全漏洞扫描利用工具

swagger-exp

A Swagger API Exploit

telegram-get-remote-ip

Get IP address on other side audio call in Telegram.

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnerability_database

weblogicscanner

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14882、CVE-2020-14883