jellyhero Goto Github PK

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

antimage

baiduhacking

burpunlimited

cmsprint

CMS和中间件指纹库

cnvd-c-2019-48814-or-cnnvd-201904-961

poc汇总 补充非默认上传路径

coding_piano

让代码变成一首钢琴曲，让程序员也成为钢琴大师！

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

cve-2018-8639-exp

dexdump

快速脱一代壳的xposed插件

dingdingpunchcarddemo

钉钉远程打卡demo

domaintransfer

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2019-17558、CVE-2019-6340

hack-requests

The hack-requests is an HTTP network library for hackers

httpninja

HTTP.ninja

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

jellyhero.github.com

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

mpvue-shop

基于mpvue的网易严选商城(域名备案中后台代码已上线腾讯云,近期上线小程序)

ms17-010-python

MS17-010: Python and Meterpreter

objection

📱 objection - runtime mobile exploration

panda-learning

学习强国 xuexiqiangguo 全网最好用学习强国助手：Panda_Learning 萌萌的熊猫帮你搞定学习强国

passionfruit

[WIP] Crappy iOS app analyzer

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

php_bug_wiki

代码审计相关的一些知识

python_blog_httpserver

python_script_for_burp

s9mf-php-webshell-bypass

为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)

satansword

红队综合渗透框架

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.