blackye

lalascan

自主开发的分布式web漏洞扫描框架，集合webkit爬虫，Subdomain子域名发现，sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台

Jenkins

Jenkins漏洞探测、用户抓取爆破

webdirdig

web敏感目录、信息泄漏批量扫描脚本，结合爬虫、目录深度遍历。

BkScanner

BkScanner 分布式、插件化web漏洞扫描器

remote_control

VC++远程管理软件

luscan-devel

根据Golismero源码二次开发的分布式漏洞扫描器(调试版)

Sethc_BackDoor

SHIFT后门，适用于windows xp\2003 server\2008 server

awvs-decode

AWVS 最简单、最快、最方便、最新的解码/解密方法，仅15行代码！！无须任何依赖任何工具

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

exp

收集各种各样的exp

db_security

pentest_study

Some-PoC-oR-ExP

各种漏洞poc、Exp的收集或编写

malicious-software-packages-dataset

An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

DNSLog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

gohs

GoLang Binding of HyperScan https://01.org/hyperscan

golang-pkg-pcre

Perl Compatible Regular Expression shim for Go

libinjection

SQL / SQLI tokenizer parser analyzer

Linux_Exploit_Suggester

Linux Exploit Suggester; based on operating system release number

logging-log4j2

Apache Log4j 2 is an upgrade to Log4j that provides significant improvements over its predecessor, Log4j 1.x, and provides many of the improvements available in Logback while fixing some inherent problems in Logback's architecture.

lua-resty-waf

High-performance WAF built on the OpenResty stack

patch

Miscellaneous software patches

selfpoc

通用poc用例集合

ssocks5

socks5 proxy simplified from shadowsocks.

test

webshell-sample

收集自网络各处的 webshell 样本，用于测试 webshell 扫描器检测率。

x-waf

适用于中小企业的云waf