HeartSleep

avatar2

Python core of avatar²

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

Awesome-POC

一个各类漏洞POC知识库

BinAbsInspector

BinAbsInspector: Vulnerability Scanner for Binaries

bug-bounty

list of bug bounty writeups

cloud-native-security

云原生安全

cloudsploit

Cloud Security Posture Management (CSPM)

CodeQLRule

个人使用CodeQL编写的一些规则

DongTai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

firmeye

IoT固件漏洞挖掘工具

gallia

Extendable Pentesting Framework

glint

glint 是一款基于浏览器爬虫golang开发的web漏洞主动(被动)扫描器

gpt4free

decentralising the Ai Industry, just some language model api's...

hackerone-reports

Top disclosed reports from HackerOne

HowToHunt

Tutorials and Things to Do while Hunting Vulnerability.

java-security

Java安全☞代码审计/漏洞研究/武器化

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 集群控制/云手机/自动化辅助框架

libveinmind

Lizard

Lizard是一款基于python的全自动化渗透脚本；支持端口扫描、IP探测、密码爆破、shodan扫描、网站目录后台扫描、whois查询，CMS识别，poc检测；webshell一句话连接，dos攻击，ddos攻击，exp利用；整体采用模块化设计，可自行调用

NextScan

飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。

openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

PentestDB

各种数据库的利用姿势

QingScan

一个漏洞扫描器粘合剂；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

Security-Hub

Security Books, Mind-Maps, Vulnerabilities Notes, methodologies, fuzzing lists and Bug-Bounty-Tips

swallow

代码审计自动化系统,底层架构为蜻蜓编排系统,墨菲SCA,fortify,SemGrep,hema

toxssin

A POST-XSS exploitation tool.

Vehicle-Security-Toolkit

汽车/安卓/固件/代码安全测试工具集

veinmind-tools

w13scan

Passive Security Scanner (被动式安全扫描器)

yakit

yak gRPC Client GUI - 集成化单兵工具平台