trusttruth's repositories
CyberSec-Books
Cyber Security Book
AD-Pentest-Notes
用于记录内网渗透(域渗透)学习 :-)
bootcamp
A open contribute bootcamp to develop DevSecOps skills...
domain_hunter_pro
domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等
gin-csrf
CSRF protection middleware for Gin.
Golang-100-Days
Golang - 100天从新手到大师
lx-music-desktop
一个基于 electron 的音乐软件
Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等,欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Pentest-and-Development-Tips
A collection of pentest and development tips
pentest-tools
内网渗透的一些工具
Powershell-Attack-Guide
Powershell攻击指南----黑客后渗透之道
proxyshell
Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207
QMD_Android
for release.
ShadowBrokersFiles
Cracked ShadowBrokers tools and latested dumps 😎
Tide
目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~
Web-Fuzzing-Box
Web Fuzzing Box - Web 模糊测试字典与一些Payloads,主要包含:弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例:https://gh0st.cn/archives/2019-11-11/1
XSS-Payloads
List of XSS Vectors/Payloads