prship Goto Github PK

2021_hvv

2021 hw

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本，用于节省红队人员工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

assetshunter

资产狩猎框架-AssetsHunter，信息收集是一项艺术~

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

charlotte

c++ fully undetected shellcode launcher ;)

chisel

A fast TCP/UDP tunnel over HTTP

code2flow

Turn your Python and Javascript code into DOT flowcharts

firewall

美国国家安全局NSA下属方程式黑客组织（Equation Group）被The Shadow Brokers（影子经纪人）hack出来的并免费分享的源码

gittest

hackpad

Hackpad is a web-based realtime wiki.

javaweb-sec

lazagne

Credentials recovery project

linkfinder

A python script that finds endpoints in JavaScript files

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

nmaps

采用Golang编写的新一代端口及指纹扫描器

pycallgraph

pycallgraph is a Python module that creates call graphs for Python programs.

reaper

一款用于src资产信息收集的工具

red-team-challenge-questions

We publish our challenge questions for everyone.

sec-admin

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

secguide

面向开发人员梳理的代码安全指南

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiyanlou-code