zer0yu

Awesome-CobaltStrike

List of Awesome CobaltStrike Resources

CyberSecurityRSS

CyberSecurityRSS: A collection of cybersecurity rss to make you better!

Berserker

A list of useful payloads for Web Application Security and Pentest/CTF

mac-initialize

💻 Mac Initial Configuration Guide（V3），macOS M1/M2 Initial for Cyberspace Security Practitioners

RedTeam_CheetSheets

RedTeam参考，修改自Ridter的https://github.com/Ridter/Intranet_Penetration_Tips

BugBounty

web fuzzing && bug hunter

Open-PoC

PoC for pocsuite3 and nuclei

ghtracker

CLI tool for tracking dependents repositories and sorting result by Stars ⭐

CVE-2021-43798

Grafana Arbitrary File Reading Vulnerability

dotfiles

My personal macOS configuration

dfimage

Reverse-engineer a Dockerfile from a Docker image.

CVE_Request

only for request cve

anew

A tool for adding new lines to files, skipping duplicates and written in Rust!

CVE-2022-22965

Spring4Shell (CVE-2022-22965)

CVE-2021-41277

crawlergo

A powerful browser crawler for web vulnerability scanners

zer0yu

AboutME

nuclei

对nuclei项目源码的阅读和注解

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

zer0yu.github.io

Goal

Goal Go Red-Team 工具类

Gososerial

参考著名漏扫XRAY的代码，无需Java环境直接从二进制角度构造Ysoserial的Payload

hetty

An HTTP toolkit for security research.

JNDIScan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

PayloadAutomation

php-cfg

A Control Flow Graph implementation in PHP

uncover

Quickly discover exposed hosts on the internet using multiple search engine.

yaklang

A programming language exclusively designed for cybersecurity

ysoserial

blazehttp

可用于安全测试的非标准HTTP协议解析库