madm4n's starred repositories
All-Defense-Tool
本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
CTFTraining
CTF Training 经典赛题复现环境
Safety-Project-Collection
收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。
BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
awvs14-scan
针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项，支持联动xray、burp、w13scan等被动批量
hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
OpenSCA-cli
OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.
Log4j2_RCE
log4j2版本漏洞复现
awesome-osint
:scream: A curated list of amazingly awesome OSINT
GTFOBins.github.io
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
WebHackersWeapons
⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
attacking-cloudgoat2
A step-by-step walkthrough of CloudGoat 2.0 scenarios.
shodan-dojo
Learning Shodan through katas
security-scripts
A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)
ApkAnalyser
一键提取安卓应用中可能存在的敏感信息。
Pwdb-Public
A collection of all the data i could extract from 1 billion leaked credentials from internet.
ssti-payloads
🎯 Server Side Template Injection Payloads
findom-xss
A fast DOM based XSS vulnerability scanner with simplicity.
AllThingsSSRF
This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
EnumerationList
This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path