xianxiaman's repositories
AndroidSec
记录一些我自己在学习Android逆向过程中的有意思的东西
anythingllm-docs
Documentation of AnythingLLM by Mintplex Labs Inc.
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
BBScan
A tiny Batch weB vulnerability Scanner
box
TVbox开源版（空壳-自行配置）
BREAK
业务风险枚举与规避知识框架（Business Risk Enumeration & Avoidance Kownledge）
Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
gitrob
Reconnaissance tool for GitHub organizations
htpwdScan
A python HTTP weak pass scanner
IIS_shortname_Scanner
an IIS shortname Scanner
jd-gui
A standalone Java Decompiler GUI
knock
Knock Subdomain Scan
lobe-chat
🤯 Lobe Chat - an open-source, modern-design LLMs/AI chat framework. Supports Multi AI Providers( OpenAI / Claude 3 / Gemini / Ollama / Bedrock / Azure / Mistral / Perplexity ), Multi-Modals (Vision/TTS) and plugin system. One-click FREE deployment of your private ChatGPT chat application.
Mobile-Security-Framework-MobSF
Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
nemo_go
Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。
offensiveinterview
Interview questions to screen offensive (red team/pentest) candidates
race-the-web
Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.
SecLists
SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
setting
学习炸七炸八
sqlmap
Automatic SQL injection and database takeover tool
subDomainsBrute
A simple and fast sub domain brute tool for pentesters
Sublist3r
Fast subdomains enumeration tool for penetration testers
tbhm
The Bug Hunters Methodology
VulApps
快速搭建各种漏洞环境(Various vulnerability environment)
WhatWaf
Detect and bypass web application firewalls and protection systems
write-ups-2018
Wiki-like CTF write-ups repository, maintained by the community. 2018
ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.