Dr0pLe7

ant

Linux服务器信息收集脚本

EHole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

jenkins-utils

Jenkins utils

lark-webhook

Paper

security technology documents

alfred-pass

Alfred 2 workflow for pass

burp-requests

Copy as requests plugin for Burp Suite

Chimay-Red

Working POC of Mikrotik exploit from Vault 7 CIA Leaks

CTF_web

a project aim to collect CTF web practices .

evilginx

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

go-bindata

Turn data file into go code.

Go-Tools

golang tools

GoogleHacking-Page

This is a summary of my study and use of Google hacking. I hope I can share it with you. If you like, please give me a star or fork it, thank you.

grammarinator

ANTLR v4 grammar-based test generator

GSIL

Github Sensitive Information Leakage（Github敏感信息泄露）

JavaDeserH2HC

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

JavaID

java source code danger function identify prog

jboss-_CVE-2017-12149

CVE-2017-12149 jboss反序列化 可回显

LaZagne

Credentials recovery project

manba

HTTP API Gateway

NTDSDumpEx

NTDS.dit offline dumper with non-elevated

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

ShellPop

Pop shells like a master.

socat-release

socat-release

vrnetlab

Run virtual routers with docker

weblogger

针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具

webshell-sample

收集自网络各处的 webshell 样本

WhatWaf

Detect and bypass web application firewalls and protection systems

Winpayloads

Undetectable Windows Payload Generation

xxe-lab

一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo