Type: User
Company: Qihoo 360
Bio: Study hard and make progress every day
Location: Beijing
spoolsample
PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
sqliv
massive SQL injection vulnerability scanner
sts2g
Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang
subbrute
A DNS meta-query spider that enumerates DNS records, and subdomains.
subdomain-takeover
一个子域名接管检测工具
subdomain3
A new generation of tool for discovering subdomains( ip , cdn and so on)
subdomainsbrute
A fast sub domain brute tool for pentesters
subover
A Powerful Subdomain Takeover Tool
superwordlist
基于实战沉淀下的各种弱口令字典
tdoa_rce
通达OA综合利用工具
the-art-of-command-line
Master the command line, in one page
the-backdoor-factory
Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)
theharvester
E-mails, subdomains and names Harvester - OSINT
thinkphp
thinkphp反序列化漏洞复现及POC编写
thinkphp-rce-poc-collection
thinkphp v5.x 远程代码执行漏洞-POC集合
threathound
ThreatHound is a threat intelligence query tool use for detecting potentially malicious IP or domains. It combines the MISP open source threat intelligence sharing platform as its back-end intelligence library, and currently integrates 69 open source threat intelligence data feeds from the security community.
tobetopjavaer
To Be Top Javaer - Java工程师成神之路
tongdaoa-fake-user
通达OA 任意用户登录漏洞
tools
top-500-username
看见一个top 500的用户名字典，觉得还可以，因为是中文，所以搞了了很low的脚本转换一下。
upload-labs
一个想帮你总结所有类型的上传漏洞的靶场
verification_code
验证码研究破解心得记录。包含网易易盾，阿里云验证码，极验验证码等主流验证码破解。包含点按验证码、点选验证、语序点选等等。已更新极验验证码、企业公示网采集心得。
vpsenvinstall
一键部署VPS渗透环境
vtest
用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
vulfocus
🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。
vulnerability-matching-plug-in
一款基于被动的漏洞关键词匹配插件。
vulnerability_library
厂商未公开漏洞库
vxscan
python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
w13scan
Passive Security Scanner (被动安全扫描器)
wafw00f
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
