n0smi1e

kiftd

sky driver & cloud driver open source server application : kiftd . welcome to the home page: https://kohgylw.github.io/ to quick start——kiftd是一款专门面向个人、团队和小型组织的私有网盘系统。轻量、开源、完善。无论是在家庭、学校还是在办公室，您都能立刻开始使用它！了解更多请访问官方网站：

PoC_CVEs

PoC_CVEs

SOC-Interview-Questions

SOC Interview Questions

vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

EasyPen

EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation

RedTeam_BlueTeam_HW

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

SecurityBaselineCheck

FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

警惕 一种针对红队的新型溯源手段!

suricata-rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

go-awesome

Go 语言优秀资源整理，为项目落地加速🏃

hugo

The world’s fastest framework for building websites.

chromedp

A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.

FingerprintHub

侦查守卫(ObserverWard)的指纹库

f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

OSINT-Framework

OSINT Framework

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

hackerone-reports

Top disclosed reports from HackerOne

sql-injection-payload-list

🎯 SQL Injection Payload List

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

RedisDesktopManager

gophish

Open-Source Phishing Toolkit

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

cupp

Common User Passwords Profiler (CUPP)

JQShell

A weaponized version of CVE-2018-9206

Arjun

HTTP parameter discovery suite.

RTA

Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.

PubilcAssetInfo

以甲方安全人员的视角，尽可能收集发现企业的域名和服务器公网IP资产

PublicMonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险