gitrobtest

Java-Security

Java Security Documents

CloudFail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

VulApps

快速搭建各种漏洞环境(Various vulnerability environment)

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

AV_Kernel_Vulns

Pocs for Antivirus Software‘s Kernel Vulnerabilities

Behinder

“冰蝎”动态二进制加密网站管理客户端

Benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

Bypass_Disable_functions_Shell

一个各种方式突破Disable_functions达到命令执行的shell

find-sec-bugs

The FindBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

Java-Web-Security

Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

JavaSecurity

Java web and command line application projects for different security topics

jmxbf

A brute force program to test weak accounts configured to access a JMX Registry

memShell

a webshell resides in the memory of java web server

MS17-010

MS17-010

penetration

this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

research-method

论文写作与资料分享

SearchWebPath

根据网站URL，判断出URL所在的网站物理路径地址。

Sec-Box

information security Tools Box （信息安全工具集合）

shadowbroker

The Shadow Brokers "Lost In Translation" leak

sudo-CVE-2017-1000367

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w9scan

Plug-in type web vulnerability scanner

webshell-1

win-keyboardlogger

Key logger that records keystrokes in 2 different formats and saves it to file as well as cloud in Windows.

x-crack

x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB

XSStrike

Most advanced XSS scanner.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.