利用字符集编码绕过waf的burpsuite插件

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Burpsuite Extension to bypass 403 restricted directory

information security Tools Box （信息安全工具以及资源集合）

ThinkPHP全日志扫描工具，命令行版和BurpSuite插件版

An easy tool to disable and enable windows defender protections

实时监控github上新增的cve、自定义关键字、安全工具更新、大佬仓库监控，并多渠道推送通知

逆向工具集合

《区块链安全入门与实战》

针对目标已知信息的字典生成工具

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Gather and update all available and newest CVEs with their PoC.

免杀姿势学习、记录、复现。

渗透测试报告/资料文档/渗透经验文档/安全书籍

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

爆破字典

SRC情报收集管理系统

windows-kernel-exploits Windows平台提权漏洞集合

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

一个关于PHP的代码审计项目

信息安全资料整理

Collection of penetration testing tools

Information security

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

对 The Hacker Playbook 3 的翻译。

Dirpath_List 目录扫描字典

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…

网站漏洞扫描平台