jwx0539 Goto Github PK

android-ssl_read-write-hook

Hook SSL_read and SSL_write functions in the Android application with Frida.

androidhttpcapture

AndroidHttpCapture网络诊断工具 是一款Android手机抓包软件 主要功能包括：手机端抓包、PING/DNS/TraceRoute诊断、抓包HAR数据上传分享。你也可以看成是Android版的"Fiddler" \(^o^)/~

cobalt_strike_wiki

Cobalt Strike系列

crack_dexhelper

梆梆企业加固详细逆向分析过程， 包含两种对该加固的脱壳机（直接解密classes0.jar和基于frida hook）

droidsslunpinning

Android certificate pinning disable tools

ehoney

安全、快捷、高交互、企业级的蜜罐管理系统，支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functions.

esd

Enumeration sub domains(枚举子域名)

hackinglibrary

‪APT,‬ ‪Cyber warfare,‬ ‪Penetration testing,‬ ‪Zero-day,Exploiting,‬ ‪Spyware,Malwares evade anti-virus detection,‬ ‪Rookit CYPTER,‬ ‪Antiviruses Bypassing-av,‬ ‪WORMS,Sandbox-Escape,‬ ‪Memory-injection,‬ ‪Ethical,Gray,White,RedTeam‬...

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

inspectvulns

jackson-rce-via-spel

An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions

jwx0539.github.io

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

micro8

micro_service_seclab

Java漏洞靶场

ml_checkcomments

demo for Machine-Learning to check the movies comments

pocbox

PoCBox - 漏洞测试验证辅助平台

redis-rogue-server

Redis(<=5.0.5) RCE

safety-project-collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

scanners-box

The toolbox of open source scanners(abbr - scanbox) - 安全行业从业者自研开源扫描器合辑

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secscan-authcheck

越权检测工具

security-data-analysis-and-visualization

2018-2020青年安全圈-活跃技术博主/博客

security_w1k1

collect

securitymanageframwork

SecurityManageFramwork是一款适用于企业内网安全管理平台，包含资产管理，漏洞管理，账号管理，知识库管、安全扫描自动化功能模块，可用于企业内部的安全管理。 本平台旨在帮助安全人员少，业务线繁杂，周期巡检困难，自动化程度低的甲方，更好的实现企业内部的安全管理。

securitymonitor

tarot

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

vue-manage-system

The web management system solution based on Vue2 and Element UI.