dingafter Goto Github PK

0day-security-software-vulnerability-analysis-technology

0day安全_软件漏洞分析技术

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

1book

《Web安全之机器学习入门》

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

antsword

AntSword is a cross-platform website management toolkit.

at-p-list

攻防清单:用于整理当前收集的所有攻防相关资源

awvs_190703137

Docker Awvs

blasting_dictionary

爆破字典

bluelotus_xssreceiver

cloc

cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.

cobra

Source Code Security Audit (源代码安全审计)

cve-2018-3191

CVE-2018-3191

cve-2018-3245

CVE-2018-3245-PoC

cve-2018-3252

CVE-2018-3252-PoC

cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-2019-0192

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

cve-2019-0604

CVE-2019-0604

cve-2019-5418

CVE-2019-5418 - File Content Disclosure on Rails

cvelist

Pilot program for CVE submission through GitHub

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

empire

Empire is a PowerShell and Python post-exploitation agent.

enterprise-security-skill

用于记录企业安全规划，建设，运营，攻防的相关资源

exploits

Windows Exploits

faceswap

Non official project based on original /r/Deepfakes thread. Many thanks to him!

fastjson

:bullettrain_side: A fast JSON parser/generator for Java. (Aliyun Data Lake Analytics https://www.aliyun.com/product/datalakeanalytics powered by fastjson )

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fuzz-wooyun-org

WooYun Fuzz 库

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzing-dicts

网站后台、文件包含、WebShell等爆破字典！