yaalonsong,yaron,github

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

contrast-ro0

A tiny Java agent that blocks attacks against unsafe deserialization

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

electron-ssr-backup

electron-ssr原作者删除了这个伟大的项目，故备份了下来，不继续开发,且用且珍惜

foca

Tool to find metadata and hidden information in the documents.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

impacket

Impacket is a collection of Python classes for working with network protocols.

iox

Tool for port forward & intranet proxy, just like lcx/ew, but better

it-security-lecture

University lecture on "IT Security" as Open Educational Resources material

mimikatz

A little tool to play with Windows security

nosqlinjection_wordlists

This repository contains payload to test NoSQL Injections

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

phishing_catcher

Phishing catcher using Certstream

python-scraping

Code samples from the book Web Scraping with Python http://shop.oreilly.com/product/0636920034391.do

python_code_audit

python 代码审计项目

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.