wa1ki0g Goto Github PK

2020-

咕咕咕

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

antenna

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

blogpicture

blogs

PentestNotes

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

bytecode

用于defineClass时，生成class的byte[]脚本

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

chat2db

🔥 🔥 🔥 An intelligent and versatile general-purpose SQL client and reporting tool for databases which integrates ChatGPT capabilities.(智能的通用数据库SQL客户端和报表工具)

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2017-0358.sh

goad

game of active directory

hook

javasec

我的java安全学习之路

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

learngolang

《Golang学习资源大全-只有Go语言才能改变世界》Only Golang Can Change The World.

oscp

OSCP Cheat Sheet

pentest_note

渗透测试常规操作记录

pocforgo

dnslog for poc

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

springscan

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

traceability

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

wa1ki0g

Config files for my GitHub profile.