riusksk

secbook

信息安全从业者书单推荐

vul_war

《漏洞战争：软件漏洞分析精要》配套资料

SecConArchive

Security Conference Archive

riusksk.github.io

riusksk's blog：

shellsploit-library

Exploit development library for python users

AUTO-EARN

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

fpicker

fpicker is a Frida-based fuzzing suite supporting various modes (including AFL++ in-process fuzzing)

ManuFuzzer

Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

Mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

nautilus-fuzz

A grammar based feedback Fuzzer

retoolkit

Reverse Engineer's Toolkit

SockFuzzer

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

crawlab

Distributed web crawler admin platform for spiders management regardless of languages and frameworks.

frankenstein

Broadcom and Cypress firmware emulation for fuzzing and further full-stack debugging

frizzer

Frida-based general purpose fuzzer

fuxi

Penetration Testing Platform

FuzzGen

ios-resources

Useful resources for iOS hacking

Jackalope

Binary, coverage-guided fuzzer for Windows and macOS

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

libsast

Generic SAST Library

Scanners-Box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

static-analysis

Static analysis tools for all programming languages, build tools, config files and more.

TAADpapers

Must-read Papers on Textual Adversarial Attack and Defense

toothpicker

TrackRay

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

VimPlugins

vim config files and plugins

wazuh

Wazuh - The Open Source Security Platform