cleanmgr112 Goto Github PK

oss-fuzz

OSS-Fuzz - continuous fuzzing of open source software.

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

owasp-dependency-check-gitlab-integration-cicd

Integration of Owasp Dependency Check in Gitlab CI/CD pipeline

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

paper

Web Security Technology & Vulnerability Analysis Whitepapers

passionfruit

[WIP] Crappy iOS app analyzer

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

pentest101

每周(也许不)分享一些关于渗透测试的知识点

pmon

poc-2

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

poc-s

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

poc-test

Java代码审计案例

poc_exp

收集的一些poc或exp及漏洞测试环境

pocassist

全新的漏洞测试框架，支持poc在线编辑、运行、批量测试。使用文档：

pocassistdb

database of pocassist（漏洞库）

pochouse

POC&EXP仓库、hvv弹药库、Nday、1day

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

pocsploit

a lightweight, flexible and novel open source poc verification framework

portmonitor

对端口进行扫描和监控&识别出危险端口告警。

portmonitor-1

基于nmap的端口监控，监控公司端口开放情况，端口报警系统

privacysentry

工信部-Android隐私合规检测，注解+Asm修改字节码的检测方案

protocol-vul

Some Vulnerability in the some protocol are collected.

proxy_pool

Proxy_Pool（代理资源池），一个小巧的代理ip抓取+评估+存储+展示的一体化的工具，包括了web展示和接口。

prvd

PHP Runtime Vulnerability Detection

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

python-miio

Python library & console tool for controlling Xiaomi smart appliances