shengqi158 Goto Github PK

003recon

Some tools to automate recon - 003random

activescanplusplus

ActiveScan++ Burp Suite Plugin

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and write-ups.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

b374k

PHP Webshell with handy features

bandit

Python AST-based static analyzer from OpenStack Security Group

break-fast-serial

A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

burpsuite

bytecode-viewer

A Java 8 Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

chinese-names-corpus

中文人名语料库

cobra

Cobra（眼镜蛇） - Static code security scanner & analyser (白盒代码安全扫描与分析系统)

coldfusionpwn

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

commix

Automated All-in-One OS Command Injection and Exploitation Tool

ctf

cupp

Common User Passwords Profiler (CUPP)

cve-2018-2628

CVE-2018-2628 & CVE-2018-2893

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

english-level-up-tips-for-chinese

可能是让你受益匪浅的英语进阶指南

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fbctf

Platform to host Capture the Flag competitions

freddy

fuckshell

Simple Webshell Scanner

fuzzdb

Web Fuzzing Discovery and Attack Pattern Database

fuzzdb-1

一个fuzzdb扩展库

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

getproxy

githack

A `.git` folder disclosure exploit

gitscan

hunt