secxm Goto Github PK

androidsecuritystudy

安卓应用安全学习

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

blasting_dictionary

爆破字典

f5decode

f5 cookie decode

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

javasec

自己学习java安全的一些总结，主要是安全审计相关

micro8

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

studypy

learn python

tomcat_examples

tomcat 默认配置

web-security-learning

Web-Security-Learning

webshell

This is a webshell open source project

webshell-sample

收集自网络各处的 webshell 样本，用于测试 webshell 扫描器检测率。