Cherishao

APT-Sample

Pull some Malware samples here for other security researchers/malware analyst's to analyze and play with.

APT-Intelligence-Library

awesome-security-weixin-official-accounts

网络安全类公众号推荐，欢迎大家推荐

POC-Collect

各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新

AutoSploit

Automated Mass Exploiter

Awesome-Hacking-1

A collection of various awesome lists for hackers, pentesters and security researchers

Five-taste

The five flavours (sweet, sour, bitter, pungent, and salty)

haven

Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors

Micro8

moloch

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

sec-chart

安全思维导图集合

Web-CTF-Cheatsheet

Web CTF CheatSheet 🐈

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

XSS-Payloads

List of advanced XSS payloads

1book

《Web安全之机器学习入门》

BVRS

BUGX.IO Vulnerability Review Standard

Cobalt_Strike_wiki

Cobalt Strike系列

CrackMapExec

A swiss army knife for pentesting networks

fengdoorbot

这是一个Telegram 电报群的聊天管理机器人， 主要用来防止垃圾消息

forum

蓝灯(Lantern)官方论坛

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Knowledge-Base

Knowledge Base 慢雾安全团队知识库

Ladon

大型网络渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义POC支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

security-onion

Linux distro for intrusion detection, enterprise security monitoring, and log management

security-site-wiki

信安之路 作者团队维护收集的一些网站地址，供大家学习使用，有好的网站博客请提交给我们，请发送到地址：myh0st@foxmail.com

SmartBCH-Token-List

Community maintained SmartBCH token registry used on https://MarketCap.Cash

Thinking

wechat_jump_game

python 微信《跳一跳》辅助

yulong-hids

一款由 YSRC 开源的主机入侵检测系统