zhangymJLU

2017-Security-ppt

Amass

In-depth Attack Surface Mapping and Asset Discovery

api.greynoise.io

Code + documentation for the Grey Noise API

Arch-Installer

Arch-Linux-Install-Script

Awesome-POC

一个各类漏洞POC知识库

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

book-1

All programming languages books

CVE-2017-17215

CVE-2017-17215 HuaWei Router RCE (NOT TESTED)

CVE-2018-4878

Aggressor Script to launch IE driveby for CVE-2018-4878

exploit

一个自动化渗透框架

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

HW

护网漏洞汇总

ibm_bak

IBM Developer 中文网站文章备份

iTerm2-Color-Schemes

Over 200 terminal color schemes/themes for iTerm/iTerm2. Includes ports to Terminal, Konsole, PuTTY, Xresources, XRDB, Remina, Termite, XFCE, Tilda, FreeBSD VT, Terminator, Kitty, MobaXterm, LXTerminal, Microsoft's Windows Terminal

JNDI-Injection-Exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

kong

:monkey: The Microservice API Gateway

KPTI-PoC-Collection

Meltdown/Spectre PoC src collection.

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

LinuxSecNotes

some learning notes about Linux Security

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率，用Go语言完全重构了原Python版本。

opsweb

百合网运维综合管理平台（python+flask框架+cmdb+scheduler+salt)，已经成功运行2年有余，基本能够实现日常运维80%以上的重复工作。因本系统依赖底层数据和众多第三方模块，部署运行难度比较大，建议仅用于研究代码！

orange

OpenResty/Nginx Gateway for API Monitoring and Management.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SMSBoom

短信轰炸/短信测压/ | 一个健壮免费的python短信轰炸程序，专门炸坏蛋蛋，百万接口，多线程全自动添加有效接口，支持异步协程百万并发，全免费的短信轰炸工具！！hongkonger开发全网首发！！

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告

TelegramGroup

Telegram群合集，如果有更多好玩的telegram群，欢迎在 issue 提出或者pull requests

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

vuls

Vulnerability scanner for Linux/FreeBSD, agentless, written in Go

xssfork