makedangdang Goto Github PK

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

apkurlgrep

Extract endpoints from APK files

av_evasion_tool

掩日 - 免杀执行器生成工具

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

crackminapp

(反编译微信小程序)一键获取微信小程序源码(傻瓜式操作), 使用了C#加nodejs制作

cve-2020-1350

This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service

cve-2020-1472

Test tool for CVE-2020-1472

cve-2020-1473

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

dictionary

来自pwn硬糖师傅的爆破字典

f-scrack

一款python编写的轻量级弱口令检测脚本，目前支持以下服务：FTP、MYSQL、MSSQL、MONGODB、REDIS、TELNET、ELASTICSEARCH、POSTGRESQL。

ffuf

Fast web fuzzer written in Go

ffuf-with-dict

fscan

一款内网扫描工具，方便一键大保健~

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

github-dorks

Find leaked secrets via github search

headlesschrome

无头浏览器的基本使用方法

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

huya

huyabisai

hw-2020

护网2020的一些情报共享，漏洞通报，还有打断红队的腿！！

intelligent-system-translation

基于django的只能协同翻译系统。主要依赖于django-docx库

kiterunner

Contextual Content Discovery Tool

makedangdang.github.io

mkddd

mkddd

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest_study

从零开始内网渗透学习