backcover7 Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

algorithm

Daily Coding

automated-subdomain-takeover

backcover7

better-random-numbers-for-javascript-mirror

A direct mirror of Johannes Baagøe's wiki on implementations of Randomness in Javascript.

cobaltstrike

CobaltStrike's source code

codeql_chinese

CodeQL中文资料和常见使用解释。Chinese version of Codeql documents

domxsswiki

Automatically exported from code.google.com/p/domxsswiki

doser

鸡肋洞半自动检测工具

english-writing

Enhance Your English Writing

fortify_rule

Decode Fortify Rule Bin File Get XML File

grokking-the-system-design

Grokking the system design interview course materials

httpninja

HTTP.ninja

java-object-searcher

java内存对象搜索辅助工具

javaid

java source code danger function identify prog

javascript-keylogger

Javascript-based keylogger

javaweb-rasp

jndikit

JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）

jspkiller

基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell

katacoda-scenarios

Katacoda Scenarios

kuzer

micro8

Gitbook

netsec-toolkit

Network protocol hacking toolkit

nsbrute

Python utility to takeover domains vulnerable to AWS NS Takeover

nsfocus-rsas-knowledge-base

绿盟科技漏洞扫描器(RSAS)漏洞库

offensiveinterview

翻译国外的@WebBreacher的安全/渗透测试/红队面试题，有部分参考作用

poc

Proof of Concepts

sourcetrail

Sourcetrail - free and open-source interactive source explorer

st2_debuggingenv

swing-rce-inspector

分析Jar包中符合Swing XSS RCE条件的类