nighter233

puppeteer

JavaScript API for Chrome and Firefox

gin

Gin is a HTTP web framework written in Go (Golang). It features a Martini-like API with much better performance -- up to 40 times faster. If you need smashing performance, get yourself some Gin.

free-api

收集免费的接口服务,做一个api的搬运工

react-admin

:sparkles: react-admin system solution : react 后台管理系统解决方案

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Cobra

Source Code Security Audit (源代码安全审计)

dumpDex

💯一款Android脱壳工具，需要xposed支持, 易开发已集成该项目。

Kunlun-M

KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

go-sniffer

🔎Sniffing and parsing mysql,redis,http,mongodb etc protocol. 抓包截取项目中的数据库请求并解析成相应的语句。

awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

smbmap

SMBMap is a handy SMB enumeration tool

JavaThings

Share Things Related to Java - Java安全漫谈笔记相关内容

Static-Program-Analysis-Book

Getting started with static program analysis. 静态程序分析入门教程。

CobaltStrike

CobaltStrike's source code

woodpecker-framework-release

高危漏洞精准检测与深度利用框架

LangSrcCurise

SRC子域名资产监控

Ehoney

安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functions.

iox

Tool for port forwarding & intranet proxy

Red-Team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

anti-portscan

使用 iptables 防止端口扫描

PoC

Proofs-of-concept

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

src

日常src平台域名收集

SecConArchive

Security Conference Archive

webshellSample

webshell sample for WebShell Log Analysis

tutorial-scripts

Ready to use code examples from the Screeps tutorial

F-Scrack

ProcessGhosting

exploit_verify_tools

基于JavaFx编写的C/S图形化界面漏洞验证工具集。