aipengjie

sensitivefilescan

reCAPTCHA

A Burp Suite Extender that recognize CAPTCHA and use for intruder payload

HTMLSimilarity

网页相似度判断：根据网页结构判断页面相似性 ，可用于相似度计算、越权检测等(Determine page similarity based on HTML page structure)

AttackFilter

Logstash 日志安全攻击分析插件

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

BurpSuite_Pro_v1.7.31

burpsuite_pro_v1.7.31

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

Java-Web-Security

Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

Mobile-Security-Framework-MobSF

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

sonarqube

Continuous Code Quality

upload-labs

一个帮你总结所有类型的上传漏洞的靶场

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

cross_browser

cross_browser_fingerprinting

CVE-2018-3245

CVE-2018-3245-PoC

Deserialize

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gold-miner

掘金翻译计划，翻译掘金上优质的英文文章

greyhame-2017

知识星球"灰袍技能" 2017 精华

ImageTragick_Poc

ImageTragick_Poc

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

RootKits-List-Download

This is the list of all rootkits found so far on github and othersites.

security

security_circle_2017

struts-scan

struts2漏洞全版本检测和利用工具

theHarvester

E-mails, subdomains and names Harvester - OSINT

webcgi-exploits

Multi-language web CGI interfaces exploits.

Worse-PDF

Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.

XposedInstaller