1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

apkizer

apkizer is a mass downloader for android applications for all available versions.

awesome-android-security

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

awesome-cloudsec-labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

bbfuzzing.txt

bugb33

Config files for my GitHub profile.

bugbounty

RepoToStoreBugBountyInfo

bugbountydork

Bug Bounty Dork

burp-copy-regex-matches

Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

crawlergo

A powerful browser crawler for web vulnerability scanners

cve

Gather and update all available and newest CVEs with their POC.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

every-single-day-a-writeup

This repository is a collection of write-ups that I read every single day

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

gowc

GoWC - Wildcard cleaner for MassDNS

graphql-voyager

🛰️ Represent any GraphQL API as an interactive graph

h4cks

Combination of all my Resources, Links & Scripts

hacking-security-ebooks

Top 100 Hacking & Security E-Books (Free Download)

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

objection

📱 objection - runtime mobile exploration

offensive-payloads

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

onelistforall

Rockyou for web fuzzing

ovaa

Oversecured Vulnerable Android App

oversecuredvulnerableiosapp

Oversecured Vulnerable iOS App