iyangyiyiyi Goto Github PK

advisory-database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

awesome-exploit

一个漏洞利用工具仓库

awesome-poc

一个各类漏洞POC知识库

awesome-redteam

一个红队知识仓库

awesome-webshell

Awesome webshell collection. Including 150 Github repo, and 200+ blog posts.

code-audit-challenges

Code-Audit-Challenges

cve-2021-26855

CVE-2021-26855 exp

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gosec

Golang security checker

javacodeaudit

Getting started with java code auditing 代码审计入门的小项目

javasecinterview

打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作

javaweb-sec

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

memshelldemo

内存马Demo合集 memshell demo for java / php / python

my-ctf-web-challenges

Collection of CTF Web challenges I made

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

php7-internal

PHP7内核剖析

phpcodz

Php Codz Hacking

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

red_team_tool_countermeasures

rules

Repository of yara rules

scylla

Intelligent proxy pool for Humans™ (Maintainer needed)

sec-jobs

信息安全实习和校招的面经、真题和资料 减少安全选手找实习/工作的痛苦

sectoolset

The security tool(project) Set from github。github安全项目工具集合

sharpwmi

sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。