GuanzOfficial

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sqlmap

Automatic SQL injection and database takeover tool

SwitchyOmega

Manage and switch between multiple proxies quickly & easily.

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Learn-Web-Hacking

Study Notes For Web Hacking / Web安全学习笔记

upload-labs

一个想帮你总结所有类型的上传漏洞的靶场

GitHack

A `.git` folder disclosure exploit

crawlergo

A powerful browser crawler for web vulnerability scanners

SNETCracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

BurpShiroPassiveScan

一款基于BurpSuite的被动式shiro检测插件

BurpSuite_403Bypasser

Burpsuite Extension to bypass 403 restricted directory

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

letsmove

ThinkphpGUI

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

BurpFastJsonScan

一款基于BurpSuite的被动式FastJson检测插件

BlindWaterMark

盲水印 by python

captcha-killer

burp验证码识别接口调用插件

thinkphp_gui_tools

ThinkPHP漏洞综合利用工具, 图形化界面, 命令执行, 一键getshell, 批量检测, 日志遍历, session包含,宝塔绕过

PHPAuditGuideBook

《PHP代码审计入门指南》 这本指南包含了我在学习PHP代码审计过程中整理出的一些技巧和对漏洞的一些理解

awescnb

快速构建、安装、切换博客园皮肤

stegsolve

open-business

以开源的方式探索博客园与开发者共赢的商业化出路

sqlmap-wiki-zhcn

可能是最完整的 sqlmap 中文文档。

ThinkphpGUI

52pojie-2024-challenge

PayloadFix

PayloadFix，批量处理XSS Payloads

BlindWaterMark

Java盲水印