fukai6

milp_speck

100-Days-Of-ML-Code

100-Days-Of-ML-Code中文版

AutoSploit

Automated Mass Exploiter

CMS-Hunter

CMS漏洞测试用例集合

CS-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

dalfox

🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

Enterprise-Security-Skill

用于记录企业安全规划，建设，运营，攻防的相关资源

GDA-android-reversing-Tool

GDA is a new decompiler written entirely in c++, so it does not rely on the Java platform, which is succinct, portable and fast, and supports APK, DEX, ODEX, oat.

InsectsAwake

Network Vulnerability Scanner

K8CScan

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

MemShellDemo

memshell demo for java and php

Miscellaneous

百宝箱

OpsManage

自动化运维平台: 代码及应用部署CI/CD、资产管理CMDB、计划任务管理平台、SQL审核|回滚、任务调度

owasp-threat-dragon-desktop

An installable desktop variant of OWASP Threat Dragon

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

POC-S

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

POC-T

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

pocs-collection

各种poc收集编写，主要改编为POC-T框架的poc，便于以后进行大型测试

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Security_Codes

个人安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档

SecurityPaper-web

Security Paper

Sepia

一款集PoC批量验证和漏洞攻击的渗透测试工具

steady

Analyses your Java and Python applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/

stp

Simple Theorem Prover.

thinkphp_rce_poc

thinkphp v5.x 远程代码执行漏洞 poc

threat-model-cookbook

This project is about creating and publishing threat model examples.

vulscan

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

vxscan

python3写的综合扫描工具，主要用来敏感文件探测(目录扫描与js泄露接口)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，弱口令探测，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

web_attack

XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.