yanyahu

PoCHub

PoC，attack，scan，redteam，vulnerable-manage

hack

渗透测试资源库

AppInfoScanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

kenzer

automated web assets enumeration & scanning [DEPRECATED]

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

vulnexipy

Vulnerabilities exploitation examples, python

CMS-Hunter

CMS漏洞测试用例集合

JavaDeserH2HC

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

defvul

DSO-Lab 漏洞研究成果整理

Apereo-CAS-Attack

WIP: Demo for Attacking Apereo CAS

VulWiki

VulWiki

vuls-env

常见漏洞环境dockerfile

nerve

NERVE Continuous Vulnerability Scanner

cve-search

cve-search - a tool to perform local searches for known vulnerabilities

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

vulnerability-paper

收集的文章 https://mrwq.github.io/tools/paper/

Heptagram

This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team.

poc

Proof of Concepts

awesome

😎 Awesome lists about all kinds of interesting topics

vultools

ExploitDB

Large collection of common exploits.

Java-Rce-Echo

Java RCE 回显测试代码

exploitdb

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

Pentest_Note

渗透测试常规操作记录

LeetCode-Go

✅ Solutions to LeetCode by Go, 100% test coverage, runtime beats 100% / LeetCode 题解

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Behinder

“冰蝎”动态二进制加密网站管理客户端

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

java-deserialization-exploits