polly9537

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

OneForAll

OneForAll是一款功能强大的子域收集工具

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

zui

Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.

w8fuckcdn

Get website IP address by scanning the entire net 通过扫描全网绕过CDN获取网站IP地址

PasswordDic

2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典 子域名字典

cryptoguard

crylogger

CRYLOGGER: Detecting Crypto Misuses for Android and Java Apps Dynamically

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Kali-learning-notes

Write down some kali learning notes

AttackDetection

Attack Detection

APT_Digital_Weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

awesome-internet-scanning

A curated list of awesome Internet port and host scanners, plus related components and much more, with a focus on free and open source projects.

awesome-honeypots

an awesome list of honeypot resources

awesome-malware-analysis

Defund the Police.

APT_REPORT

Interesting APT Report Collection And Some Special IOC

cti-stix2-json-schemas

OASIS TC Open Repository: Non-normative schemas and examples for STIX 2

XServer

A Xposed Module for Android Penetration Test, with NanoHttpd.

Cknife

Cknife

DGA-Domain-Predict

使用LSTM模型检测DGA域名

PHP-backdoors

A collection of PHP backdoors. For educational or testing purposes only.

WebShell

Bundle web apps to native OS X app

webshellSample

webshell sample for WebShell Log Analysis

b374k

PHP Webshell with handy features

php-webshells

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

WebShell

Webshell && Backdoor Collection

webshell

This is a webshell open source project