blackjliuyun Goto Github PK

ad_webscanner

AD工作室精心研发漏洞安全扫描器

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

awesome-red-teaming

List of Awesome Red Teaming Resources

blackjliuyun.github.io

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

charon

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

cve-2019-1003000-and-cve-2018-1999002-pre-auth-rce-jenkins

Python CVE-2019-1003000 and CVE-2018-1999002 Pre-Auth RCE Jenkins

cve-2019-2725

cvetest

cve

edu-dns-zone-transfer

script to scan edu.cn DNS Servers

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

hack_tools_for_me

自己为了方便收集的小工具

java-deserialization-exploits

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

jok3r

Jok3r - Network and Web Pentest Automation Framework (README & Documentation not up-to-date, Work in Progress...)

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

lg-smart-ip-device-backup-download

Exploit for downloading backup files from LG Smart IP Devices.

marshalsec

mind-map

各种安全相关思维导图整理收集

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

php_bug_wiki

代码审计相关的一些知识

poc-exp

收集或编写各种漏洞PoC、ExP

proxy_pool

Python爬虫代理IP池(proxy pool)

regeorg

A modified reGeorg for One-line PHP Shell.

rottenpotato

RottenPotato local privilege escalation from service account to SYSTEM 用于本地提升权限ms16-075

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sfish_pt

st2-057

St2-057 Poc Example

suricatarules-attackdetection-

SURICATA Rules for Attack Detection