T1ng

Mind-Maps

Mind-Maps of Several Things

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

PrintNightmare

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

vulbase

各大漏洞文库合集

DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

netspy

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

link

link is a command and control framework written in rust

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Azure-Red-Team

Azure Security Resources and Notes

Viper

Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台

Hosts_scanV2

这是一个用于IP和域名碰撞匹配访问的小工具优化版，能减少碰撞中出来的误报，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

Sec-Tools

🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。

Active-Directory-Pentest-Notes

个人域渗透学习笔记

Hunting-Active-Directory

个人整理的一些域渗透Tricks，可能有一些错误。

domainTools

内网域渗透小工具

SpringBootVulExploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

BurpSuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

RedTeam_BlueTeam_HW

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

FastjsonExploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

RedTeamTools

记录自己编写、修改的部分工具

anti-av

Resources About Anti-Virus and Anti-Anti-Virus, including 200+ tools and 1300+ posts

HackMe-SQL-Injection-Challenges

Pen test your "friend's" online MMORPG game - specific focus, sql injection opportunities

algorithm

HelloGitHub

:octocat: 分享 GitHub 上有趣、入门级的开源项目。Share interesting, entry-level open source projects on GitHub.

facebook-bug-bounties

Hacking Facebook for fun and profit: It’s not that hard, apparently (exclusive)

JavaLearnVulnerability

Java漏洞学习笔记 Deserialization Vulnerability