BigYoung (BigYoungs)

BigYoungs

Geek Repo

Location:Beijing,China

Home Page:https://sec.bigyoung.cn

Github PK Tool:Github PK Tool

BigYoung's starred repositories

Helios

Helios: Automated XSS Testing

Language:PythonStargazers:76Issues:0Issues:0

XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

Language:RubyStargazers:1482Issues:0Issues:0

MAT

This tool, programmed in C#, allows for the fast discovery and exploitation of vulnerabilities in MSSQL servers

Language:C#License:MITStargazers:47Issues:0Issues:0

prismx

:: 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具。

Language:TypeScriptLicense:MITStargazers:427Issues:0Issues:0

CodeAudit

记录一些代码审计过的源码

Stargazers:74Issues:0Issues:0

security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

Stargazers:4225Issues:0Issues:0

pdFExploits

this repo contains all types of pdf exploits..

Stargazers:179Issues:0Issues:0

wxapkg

微信小程序反编译工具,.wxapkg 文件扫描 + 解密 + 解包工具

Language:GoStargazers:1529Issues:0Issues:0

cloud-audit

cloud-audit (云安全审计助手)是检测公有云厂商AK/SK泄漏被利用的工具,通过定期调用云平台接口审计日志,基于异常行为/黑特征/基线发现疑似入侵行为。

Language:PythonStargazers:26Issues:0Issues:0

SDL_Vul_Wiki

Security & Development & VulWiki

Stargazers:1Issues:0Issues:0

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Language:PythonLicense:MITStargazers:2754Issues:0Issues:0

BurpExtend

基于Burp插件开发打造渗透测试自动化

Language:HTMLStargazers:425Issues:0Issues:0

FindSomething

基于chrome、firefox插件的被动式信息泄漏检测工具

Language:JavaScriptLicense:GPL-3.0Stargazers:941Issues:0Issues:0

SiteLiveScan

批量对站点、URL探活

Stargazers:1Issues:0Issues:0

alicloud-tools

阿里云ECS、策略组辅助小工具

Language:GoLicense:Apache-2.0Stargazers:802Issues:0Issues:0

JS_Find_ALL

通过url、js链接发现urls、子域名和敏感信息。

Stargazers:1Issues:0Issues:0

swagger-exp-knife4j

一款基 于Knife4j 的 Swagger 接口自动化测试未授权工具

Language:PythonStargazers:49Issues:0Issues:0

scripts

信安之路上涉及的一些脚本

Language:PythonStargazers:211Issues:0Issues:0

isCdn

检查一个ip是否在cdn范围内

Language:GoLicense:MITStargazers:30Issues:0Issues:0

domain_screen

站点批量截图

Language:PythonStargazers:149Issues:0Issues:0

w13scan

Passive Security Scanner (被动式安全扫描器)

Language:SmartyLicense:GPL-2.0Stargazers:1883Issues:0Issues:0

host-scan

RongScan中的host碰撞板块

Stargazers:20Issues:0Issues:0

SecurityMind

share experience towards for information management, brainstorming and so on.

Language:HTMLStargazers:419Issues:0Issues:0

open-business

以开源的方式探索博客园与开发者共赢的商业化出路

Stargazers:132Issues:0Issues:0

bk-cmdb

蓝鲸智云配置平台(BlueKing CMDB)

Language:GoLicense:NOASSERTIONStargazers:5364Issues:0Issues:0

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPLicense:MITStargazers:55863Issues:0Issues:0

ASVS

Application Security Verification Standard

Language:HTMLLicense:CC-BY-SA-4.0Stargazers:2622Issues:0Issues:0

personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

Language:TypeScriptLicense:NOASSERTIONStargazers:16405Issues:0Issues:0

rhizobia_J

JAVA安全SDK及编码规范

Language:JavaLicense:BSD-3-ClauseStargazers:1027Issues:0Issues:0

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

Language:PowerShellLicense:GPL-3.0Stargazers:592Issues:0Issues:0