sry309

5

第5章 前端黑客之界面操作劫持

8

第8章 HTML5安全

antinet

.NET anti-managed debugger and anti-profiler code

chrome_xss_escape

用于xss 编码，我的第一个chrome 插件。

chromePass

Decrypt all saved Chrome passwords

ciscn_docs

:neckbeard:在参加 2013 年第六届全国大学生信息安全竞赛时，我们团队的各种文档资料。

COMRaider

ActiveX Fuzzing tool with GUI, object browser, system scanner, and distributed auditing capabilities

diaoyu

diaoyu

discuzscanner

DNS_AXFR_Client

A python DNS Transfer Client

edu-dns-zone-transfer

script to scan edu.cn DNS Servers

Exploits-Archives

sebug.net上面的镜像

Google-IPs

Google 全球 IP 地址库

IronWASP

Source code of IronWASP

IronWASP-Python-Plugins

Python Plugins that power IronWASP

IronWASP-Ruby-Plugins

Ruby Plugins used within IronWASP (Iron Web application Advanced Security testing Platform).

my_xss_platform

MY XSS PLATFORM

OutLook_WebAPP_Brute

Microsoft Outlook WebAPP Brute

playweb

port-scan-automation

Automate NMAP Scans and Generate Custom Nessus Policies Automatically

proxy

跨子域cross-subdomain demo

python-webshell

webshell writen in python

Ravan

Source code of Ravan, the JavaScript based Distributed Computing System - http://andlabs.org/tools/ravan.html

scripts-1

A collection of useful scripts for penetration testers

XSS-Filter-Evasion-Cheat-Sheet-CN

XSS_Filter_Evasion_Cheat_Sheet 中文版

xss.swf

a tiny tool for swf hacking, just browse it:)

xss_scan

XSS Scan

xssprobe

xss probe to steal page info: browser, ua, lang, referer, location, toplocation, cookie, domain, title, screen, flash, etc.

XssScaner

Xss Scaner

XXE-OOB-Exploitation-Toolset-for-Automation

XXE OOB Exploitation Toolset for Automation