Drag0nRen

Web-Security-Learning

Web-Security-Learning

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-incident-response

A curated list of tools for incident response

BaiLu-SED-Tool

白鹿社工字典生成器，灵活与易用兼顾。

Benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

DarthSidious-Chinese

DarthSidious 中文版

gophish

Open-Source Phishing Toolkit

GSIL

GitHub Sensitive Information Leakage（GitHub敏感信息泄露）

Hawkeye

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

Micro8

pentest_study

从零开始内网渗透学习

Pyhacker

【Pyhacker】Python安全开发

Scanners-Box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

scripts

信安之路上涉及的一些脚本

Sec-Box

information security Tools Box （信息安全工具以及资源集合）

secguide

面向开发人员梳理的代码安全指南

sqlmap

Automatic SQL injection and database takeover tool

wahah

I am the one who just come the githut,i am learning how to use it

xssor

XSSOR：方便XSS与CSRF的工具，http://evilcos.me/lab/xssor/

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。