hackersources Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

blockchain-dark-forest-selfguard-handbook

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

container-escape-check

docker container escape check || Docker 容器逃逸检测

fastjson-rce

fiber

⚡️ Express inspired web framework written in Go

go-admin

基于Gin + Vue + Element UI & Arco Design & Ant Design 的前后端分离权限管理系统脚手架（包含了：多租户的支持，基础用户管理功能，jwt鉴权，代码生成器，RBAC资源控制，表单构建，定时任务等）3分钟构建自己的中后台项目；项目文档》：https://www.go-admin.pro V2 Demo： https://vue2.go-admin.dev V3 Demo： https://vue3.go-admin.dev Antd 订阅版：https://antd.go-admin.pro

goby-poc

447个goby poc，是否后门及重复自行判断，来源于网络收集的Goby&POC，实时更新。

hackersources.github.io

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

note

笔记

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesterspecialdict

Dictionary for penetration testers happy hacker

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-ppt

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

securitylist

A list for Web Security and Code Audit

shellghost

A memory-based evasion technique which makes shellcode invisible from process start to end.

thinkphp-vuln

关于ThinkPHP框架的历史漏洞分析集合

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

wordlists

Real-world infosec wordlists, updated regularly

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell