Fanxiaoyao66

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Fuzz_dic

参数 | 字典 collections

sqlmap

Automatic SQL injection and database takeover tool

RedisWriteFile

通过 Redis 主从写出无损文件

SGK_Sites_and_Bots

免费在线社工库，免费Telegram社工库

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

whisper

Robust Speech Recognition via Large-Scale Weak Supervision

ShellcodeLoader

This is my FirstRepository

secguide

面向开发人员梳理的代码安全指南

svnExploit

SvnExploit支持SVN源代码泄露全版本Dump源码

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

beef

The Browser Exploitation Framework Project

ew

内网穿透(跨平台)

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

pikachu

一个好玩的Web安全-漏洞测试平台

javaweb-sec

WebShell-Bypass-Guide

从零学习Webshell免杀手册

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

iodine

Official git repo for iodine dns tunnel

Sec-Interview-4-2023

一个2023届毕业生在毕业前持续更新、收集的安全岗面试题及面试经验分享~

pwncat

Fancy reverse and bind shell handler

impacket

Impacket is a collection of Python classes for working with network protocols.

cms

Multilingual PHP CMS built with Laravel and bootstrap

cms

SS CMS 基于 .NET Core，能够以最低的成本、最少的人力投入在最短的时间内架设一个功能齐全、性能优异、规模庞大并易于维护的网站平台。

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

Sec-Interview

Web安全工程师/信息安全工程师/渗透测试工程师 面试题库

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Vuln-List

(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理，主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等，并且会持续更新。

Viper

Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台

Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).