kakakpy's repositories
generative-ai-for-beginners
12 Lessons, Get Started Building with Generative AI 🔗 https://microsoft.github.io/generative-ai-for-beginners/
w3a_SOC
元豚科技 - 基于日志安全分析做切入,做最好用的「云原生安全运维工作台」
p3c
Alibaba Java Coding Guidelines pmd implements and IDE plugin
consulo-java
JVM platform plugin. Languages: Java, Bnd, Java Manifest, Java SPI
ARL
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
git-secrets
Prevents you from committing secrets and credentials into git repositories
LSpider
LSpider 一个为被动扫描器定制的前端爬虫
w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台,无需编写代码的安全自动化,使用 SOAR 可以让团队工作更加高效
owasp.github.io
OWASP Foundation main site repository
sec-dev-in-action-src
《白帽子安全开发实战》配套代码
DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥
BurpFastJsonScan
一款基于BurpSuite的被动式FastJson检测插件
BurpCrypto
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).
jd_seckill
fork huanghyw/jd_seckill
domainNamePredictor
一个简单的现代化公司域名使用规律预测及生成工具
BurpSuitePro-2.1
什么? 你想用免费的BurpSuitePro版本!!!
CrossC2-1
generate CobaltStrike's cross-platform payload
Kunlun-M
Kunlun-Mirror 专注于安全研究员使用的审计辅助工具
secscan-authcheck
越权检测工具
MagiCude
分布式端口(漏洞)扫描、资产安全管理、实时威胁监控与通知、高效漏洞闭环、漏洞wiki、邮件报告通知、poc框架
momo-code-sec-inspector-java
IDEA静态代码安全审计及漏洞一键修复插件
kernel-exploits
Various kernel exploits
CrossC2
来自 gloxec 的 CrossC2 frameworkfork 备份 2.0版本
CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
espoofer
An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻
godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability