9k01 Goto Github PK

ai-roadmap

ApacheCN AI 路线图（知识树）

awesome-hacking

awesome hacking chinese version

browser_vuln_check

browser_vuln_check ,利用已知的浏览器漏洞PoC 来快速检测Webview 和浏览器环境是否存在安全漏洞,只需要访问run.html 即可获取所有扫描结果,适用场景包含:APP 发布之前的内部安全测试,第三方Webview 漏洞检测等(browser_vuln_check framework using some known browser vulnerabilities PoC to quick automate aduit WebView or Browser security ,apply to application security before issue and detecting third-part WebView security)..

browser_xss_auditor_fuzzing

浏览器XSS 过滤器Fuzzing 框架 (browser xss aduit fuzzing framework )..

codeql-uboot

cross_domain_postmessage_vuln_dig

WEB 跨域postMessage() 漏洞挖掘工具,基本原理:使用AJAX 获取页面代码,结合iframe 和data 协议构造测试环境,然后在iframe 下的window.onmessage 中插入hook 监控onmessage 的参数,最后通过能否被原来的onmessage 逻辑引用参数中的data 属性来判断是否可以跨域传递数据..

devtools-frontend

The Chrome DevTools UI

fuzzing-imagemagick

OpenSource My ImageMagick Fuzzer ..

hacker_document

收集一些以前看过对于入门和进阶很有用的攻击原理文档..

image

js-yaml

JavaScript YAML parser and dumper. Very fast.

kite

Browser Fuzzing Framework ,浏览器Fuzzing 框架..

libfuzzer-workshop

Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.

machine-learning

机器学习原理

mobi-python

A library for reading (unencrypted) mobi-reader files in Python

pydbg_document

This document is collect interface's using in PyDbg.py and conver to markdown for anybody convenient reading ..

supplicant_exploit_kit

Sise supplicant exploit kit -- 华软蝴蝶漏洞利用工具包..

vuln_javascript

模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..

xss-hunter

XSS hunter 收集Webview 页面上存在的反射,储存型XSS ,方便应急APP 和前端页面在发布时遇到XSS 安全问题..