on-theway Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

blasting_dictionary

爆破字典

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

bruteforce-bitcoin-brainwallet

Bruteforce dictionary attack on bitcoin brain wallets

butian_spider

2019 补天厂商爬虫与数据可视化文件打包

buy_pig_plan

电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 随缘维护，佛系更新

corscanner

Fast CORS misconfiguration vulnerabilities scanner🍻

cve-2017-8759

CVE-2017-8759

cve-2018-8420

原PoC甚至符号都打错了！太不走心了！

dirsearch

Web path scanner

douyin-user-data

抖音1亿用户详细资料-50GB

exp

收集各种各样的exp

exploit-dictionary

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdict

The dictionary used for the fuzz test/模糊测试使用到的字典

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzerpwd

Fuzzer常见的弱口令作为字典

fuzzlist

Dictionary of URLs

hacking-script

hacking-script

jsonandhttpp

Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.

momo-code-sec-inspector-java

IDEA静态代码安全审计及漏洞一键修复插件

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

scripts

Utils

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_codes

安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档与工具整理

shadowsocksr

Python port of ShadowsocksR

src

日常src平台域名收集

src-experience

工欲善其事，必先利其器

src-script

挖掘src常用脚本

src_edu

为各位出色的渗透工程师提供攻击目标。