yanyahu

gospider

Gospider - Fast web spider written in Go

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

yjdirscan

御剑目录扫描专业版，简单实用的命令行网站目录扫描工具，支持爬虫、fuzz、自定义字典、字典变量、UA修改、假404自动过滤、扫描控速等功能。

kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

serenity

The Serenity Operating System 🐞

project-layout

Standard Go Project Layout

kratos

Your ultimate Go microservices framework for the cloud-native era.

overlord

Overlord是哔哩哔哩基于Go语言编写的memcache和redis&cluster的代理及集群管理功能，致力于提供自动化高可用的缓存服务解决方案。

go-zero

A cloud-native Go microservices framework with cli tool for productivity.

ENScan

基于各大API的一款企业信息查询工具，为了更快速的获取企业的信息，省去收集的麻烦过程，web端于plat平台上线

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

GobyExtension

Goby extension doc.

puppeteer

JavaScript API for Chrome and Firefox

Pentest_Interview

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~

pymotw-3

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

sqlmap

Automatic SQL injection and database takeover tool

captcha-killer

burp验证码识别接口调用插件

reCAPTCHA

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload 自动识别图形验证码并用于burp intruder爆破模块的插件

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

secscan-authcheck

越权检测工具

webshell

This is a webshell open source project

xss-labs

xss 跨站漏洞平台

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

teemo

A Domain Name & Email Address Collection Tool

masnmapscan-V1.0

一款用于资产探测的端口扫描工具。整合了masscan和nmap两款扫描器，masscan扫描端口，nmap扫描端口对应服务，二者结合起来实现了又快又好地扫描。

Github-Monitor

Github RCE/0day监控系统 My'Blog:

cmsprint

CMS和中间件指纹库

Learn-Web-Hacking

Study Notes For Web Hacking / Web安全学习笔记