cafan

章鱼哥's starred repositories

sec_profile

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

Language:HTML111400

文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.

Language:Shell52700

llvm-ir-tutorial

LLVM IR入门指南

Language:LLVMCC-BY-4.0127400

ExcessivePermissionAttack

Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications

Language:Go1100

kernel-security-learning

Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel CVE debug.

Language:C62000

windows

Windows inside a Docker container.

Language:ShellMIT1633400

xssfinder

XSS discovery tool

Language:GoGPL-3.019900

s3-leaks

List of S3 Hacks

36700

security_test_guide

安全测试导论

8100

dic

渗透字典，框架信息泄露，备份文件泄露，配置文件泄露。字典

Language:Python17400

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

Language:Python732700

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

Language:Java191800

burpFakeIP

服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

Language:Java139500

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

Language:HTML288700

ARL-Finger-ADD-Go

ARL(灯塔)批量添加指纹

Language:GoGPL-3.012300

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Language:DockerfileNOASSERTION161700

go-zero

A cloud-native Go microservices framework with cli tool for productivity.

Language:GoMIT2863200

AppInfoScanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Language:PythonGPL-3.0308700

hackerone-reports

Top disclosed reports from HackerOne

Language:Python355100

sec-books-part1

:books: 网安类绝版图书

77500

offlinepost

读过的安全文章离线归档 | begin in 2023.11.23

Language:C1100

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Language:PowerShellMIT573800