echocipher's Projects
Rich is a Python library for rich text and beautiful formatting in the terminal.
收集一些比较优秀的开源安全项目,以帮助甲方安全从业人员构建企业安全能力。
弱口令,敏感目录,敏感文件等渗透测试常用攻击字典
CVE-2020-11651&&CVE-2020-11652 EXP
Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测
A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
在线资产漏洞扫描管理系统
Smart DNS Brute Forcer
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
information security Tools Box (信息安全工具以及资源集合)
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
The security tool(project) Set from github。github安全项目工具集合
Collection of Security Conference Slides/Papers
大安全各领域各公司各会议分享的PPT
个人安全开发代码归档:包括但不限于渗透测试,资产收集,大规模漏洞扫描器,网络安全相关资料文档
collect
旨在通过分析企业信息安全建设过程中的心路历程 ,从技术、管理、治理等多个层面了解企业信息安全建设的不同阶段
Accurately Locate Smartphones using Social Engineering
Shikata ga nai (仕方がない) encoder ported into go with several improvements
The Shadow Brokers "Lost In Translation" leak
A collection of C# tools for various purposes (kerberoasting, tickets, mimikatz, privesc, domain enumeration and more)
shellcodeloader
各种App、小程序、网站的请求签名算法。 现已有:自如、小红书、蛋壳公寓、luckin coffee(瑞幸咖啡)
新一代SKRoot,挑战全网root检测手段,跟面具完全不同思路,摆脱面具被检测的弱点,完美隐藏root功能,全程不需要暂停SELinux,实现真正的SELinux 0%触碰,通用性强,通杀所有内核,不需要内核源码,直接patch内核,兼容安卓APP直接JNI调用,稳定、流畅、不闪退。
Automated pentest framework for offensive security experts
Software-Security-Learning
Some kernel fuzzing paper about windows and linux
一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..
This tool enables the compilation of a C# program that will execute arbitrary PowerShell code, without launching PowerShell processes through the use of runspace.