Allen-smith

Sa-Token

一个轻量级 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式Session会话、微服务网关鉴权、单点登录、OAuth2.0

security-guide-for-developers

Security Guide for Developers (实用性开发人员安全须知)

redash

Make Your Company Data Driven. Connect to any data source, easily visualize, dashboard and share your data.

TPscan

一键ThinkPHP漏洞检测

pentest-tools

A collection of custom security tools for quick needs.

python-regex-scanner

Demo of how to use the underlying SRE engine to build a regex scanner

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

Pocsuite

This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.

Cobra

Source Code Security Audit (源代码安全审计)

dnscat2

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

venom

venom (metasploit) shellcode generator/compiler/listener

Sebug

Sebug提交的漏洞详情和POC

weixin-bot-chrome-extension

微信机器人Chrome扩展版

wechat4u

微信 wechat web 网页版接口的 JavaScript 实现，兼容Node和浏览器，微信机器人

CMS-Exploit-Framework

CMS Exploit Framework

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

webdir

网站目录

phpvulhunter

A tool that can scan php vulnerabilities automatically using static analysis methods

reverse-engineering-for-beginners

translate project of Drops

CTFd

CTFs as you need them

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

bbsmax

BBSMAX 5 是一款基于ASP.NET技术的开源论坛程序. BBSMAX 5 内建支持博客, 相册, 微博等常见SNS功能, 为在Windows服务器上架设社区网站提供完美的解决方案.

hieroglyphy

Transform any javascript code to an equivalent sequence of ()[]{}!+ characters that runs in the browser!

wooyun_public

乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

VulApps

快速搭建各种漏洞环境(Various vulnerability environment)