b1ngz

spring-boot-actuator-cloud-vul

Spring Boot Actuator + Spring Cloud Vul Env

SuperWordlist

基于实战沉淀下的各种弱口令字典

b1ngz.github.io

cloudSec

云安全利用工具-云平台AK/SK-WEB利用工具，添加AK/SK自动检测资源，无需手动执行，支持云服务器、存储桶、数据库操作

solr-injection

Apache Solr Injection Research

vue-simple-flowchart

flowchart editor for Vue.js

vul-py-server

See https://xianzhi.aliyun.com/forum/topic/1819/

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

Arjun

HTTP parameter discovery suite.

bitnami-docker-etcd

Bitnami etcd Docker Image

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

CVE-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

django-celery-beat

Celery Periodic Tasks backed by the Django ORM

django_dramatiq

A Django app that integrates with Dramatiq.

docs

Documentation for Wavefront and its services

docsify

🃏 A magical documentation site generator.

dramatiq

A fast and reliable background task processing library for Python 3.

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment

GitHack

A `.git` folder disclosure exploit

idea_exploit

Gather sensitive information from (.idea) folder for pentesters

intellij-community

IntelliJ IDEA Community Edition

Java-Deserialization-Scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

LinkFinder

A python script that finds endpoints in JavaScript files

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

pyduktape

Embed the Duktape JS interpreter in Python

RedisModules-ExecuteCommand

Tools, utilities and scripts to help you write redis modules!

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

yaml-payload

A tiny project for generating SnakeYAML deserialization payloads

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

zmap

zmap +mss +wscale