zthua

awesome

😎 Awesome lists about all kinds of interesting topics

p3c

Alibaba Java Coding Guidelines pmd implements and IDE plugin

python-spider

:rainbow:Python3网络爬虫实战：淘宝、京东、网易云、B站、12306、抖音、笔趣阁、漫画小说下载、音乐电影下载等

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

static-analysis

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

zaproxy

The ZAP core project

gixy

Nginx configuration static analyzer

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

awesome-incident-response

A curated list of tools for incident response

Mind-Map

各种安全相关思维导图整理收集

awesome-api-devtools

:books: A collection of useful resources for building RESTful HTTP+JSON APIs.

adminset

自动化运维平台：CMDB、CD、DevOps、资产管理、任务编排、持续交付、系统监控、运维管理、配置管理

awesome-vehicle-security

🚗 A curated list of resources for learning about vehicle security and car hacking.

xssor2

XSS'OR - Hack with JavaScript.

WindowsExploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

StockChart

Zeus-Scanner

Advanced reconnaissance utility

jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

xssfork

DBScanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

Benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

appium

Python Appium objectpage

DB_BaseLine

数据库基线检查工具

Android-Security-Notes-personal

个人整理的Android安全学习笔记

Scanners-Box

安全从业人员常用开源工具资料合集

securitytools

android安全工具大全

android-app-sec-guidebook-zh

:book: [译] 安卓应用安全指南 中文版

android-app-automated-test

seu SRTP ，一个基于自动化测试的安卓安全性及性能评估程序

xtest-wiki