Cluren's repositories
20190511_awd_docker
2019 年 5 月 11 日防灾科技学院 “应急挑战杯” 大学生网络安全邀请赛 AWD 靶机题目。
awesome-web-hacking
A list of web application security
Ciphey
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
cluren.github.io
Personal website
ctf-katana
This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.
CTF-WAF
针对CTF线下赛的通用WAF,带流量转发，日志审计功能。
CVE-2023-36899
CVE-2023-36899漏洞的复现环境和工具，针对ASP.NET框架中的无cookie会话身份验证绕过。
FourEye
AV Evasion Tool For Red Team Ops
fscan-POC
强化fscan的漏扫POC库
fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
GoBypassAV
整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。
Hacking-With-Golang
Golang安全资源合集
nmap_python
python-nmap to csv file and add to mongodb
php_bugs
PHP代码审计分段讲解
powershell-bypass
powershell命令免杀的小工具，可过Defender、360等，可执行上线cobaltstrike、添加计划任务等。 A powershell loader bypass anti-virus
RequestTemplate
双语双端内网扫描以及验证工具
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
SharpDBeaver
DBeaver数据库密码解密工具
SRC-script
挖掘src常用脚本
TaiO
TaiO 站在攻击方角度，对靶标进行网络测绘
WebShell
Webshell && Backdoor Collection