tuola

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

c0okB.github.io

ctf-challenges

ctf-tools

tổng hợp tool ctf

CVE-2022-22965

spring4shell | CVE-2022-22965

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

edusoho

EduSoho 网络课堂是由杭州阔知网络科技有限公司研发的开源网校系统。EduSoho 包含了在线教学、招生和管理等完整功能，让教育机构可以零门槛建立网校，成功转型在线教育。EduSoho 也可作为企业内训平台，帮助企业实现人才培养。

Emergency-Response-Notes

应急响应实战笔记，一个安全工程师的自我修养。

gobuster

Directory/File, DNS and VHost busting tool written in Go

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

incubator-doris

Apache Doris (Incubating)

javasec_study

java代码审计学习笔记

LearnPython

以撸代码的形式学习Python

linux-exploit-suggester

Linux privilege escalation auditing tool

Micro8

Gitbook

mygg.js

Proxy via XSS

PeiQi-WIKI-Book

面向网络安全从业者的知识文库🍃

PublicSecScan

针对大量WEB资产进行分布式WEB安全扫描，发现web环境下常规的一些安全漏洞

pwnfile

Python

All Algorithms implemented in Python

Python-100-Days

Python - 100天从新手到大师

python-small-examples

Python有趣的小例子一网打尽。Python基础、Python坑点、Python字符串和正则、Python绘图、Python日期和文件、Web开发、数据科学、机器学习、深度学习、TensorFlow、Pytorch，一切都是简单易懂的小例子。

python_code_audit

python 代码审计项目

rhizobia_J

JAVA安全SDK及编码规范

Scanners-Box

The toolbox of open source scanners(abbr - scanbox) - 安全行业从业者自研开源扫描器合辑

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

topology

A diagram (topology, UML) framework uses canvas and typescript. 一个轻量（100k左右）、功能丰富的绘图工具（微服务架构图、拓扑图、流程图、类图等ULM图、脑图，动画、视频支持）。 【在线使用】：

code-snippets

Various code snippets

Software-Security-2021-2022

2021 交大程式安全 binary exploit 課程教材

TamilCTF2021

Challenge files