j5s - Giters

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.

Language:PythonGPL-3.0988 43 169

identYwaf

Blind WAF identification tool

Language:PythonMIT558 14 12

Github_Nuggests

自动爬取Github上文件敏感信息泄露，抓取邮箱密码并自动登录邮箱验证，支持126，qq，sina，163邮箱

Language:Python337 80

CTF_SPECIAL_TRAINING_CAMP

《 CTF 特训营》一书练习文件

Language:Python287 14 2

SAST

《深入理解SAST静态应用安全测试》Static Application Security Testing.

276 50

articles

Personal Blog/主记录漏洞挖掘相关研究(文章位于issues)

230 16 78

FuckPHP

《PHP安全-只有PHP安全才能拯救世界》Only PHP Security Can Save The World.

138 50

iOSSecurity

《iOS安全测试与安全研究》

101 5 1

CORS-SCAN

扫描存在CORS跨域漏洞的网站。

Language:Python82 30

X-WebScan

Vulcan2.0|分布式扫描器|漏洞扫描|指纹识别

78 9 1

MetasploitModules_0x727

Metasploit Modules Development

Language:RubyMIT70 40

PassiveSecCheck

自动化被动扫描系统分为数据源、数据处理、漏洞验证等三个子系统，本系统属于漏洞验证部分，根据提供的数据进行分布式安全验证，确定是否包含相关严重漏洞。

Language:Python49 10

httpdoom

HttpDoom is a tool for response-based inspection of websites across a large amount of hosts for quickly gaining an overview of HTTP-based attack surface.

Language:C#49 20