findneo

AllThingsSSRF

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Signal-Desktop

A private messenger for Windows, macOS, and Linux.

Thief

一款创新跨平台摸鱼神器，支持小说、股票、网页、视频、直播、PDF、游戏等摸鱼模式，为上班族打造的上班必备神器，使用此软件可以让上班倍感轻松，远离 ICU。

recon-pipeline

An automated target reconnaissance pipeline.

luigi

Luigi is a Python module that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization etc. It also comes with Hadoop support built in.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

Real-World-CTF-3rd-Challenge-Attachments

Challenge attachments for RWCTF 3rd.

CrackSleeve

破解CS4.0

Struts2-RCE

A Burp Extender for checking for struts 2 RCE vulnerabilities.

coder2gwy

互联网首份程序员考公指南，由3位已经进入体制内的前大厂程序员联合献上。

pdd_3years

EHole

EHole(棱洞)-红队重点攻击系统指纹探测工具

fuzz.txt

Potentially dangerous files

AssetsHunter

资产狩猎框架-AssetsHunter，信息收集是一项艺术~

America-Against-America

《美国反对美国》是王沪宁先生在上世纪80年代末赴美观察写作的。我们知道在那个年代**对西方特别是美国的追捧有多高，所以突然看到一个学者在80年代就有如此清楚的认识，十分钦佩。由于网上只有效果很差的PDF扫描版，所以我想利用OCR技术和肉眼（人体OCR）来转成现代化的文本格式。目前已经全部完成。

proj3-PKE-oslabs

一组面向普通大学本科生的简单操作系统实验

subjs

Fetches javascript file from a list of URLS or subdomains.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Caesar

一个全新的敏感文件发现工具

HackTools

The all-in-one browser extension for offensive security professionals 🛠

dnstunnel

dns tunnel C2

k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

Web-Fuzzing-Box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

vulscan

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...