wooyun-evil Goto Github PK

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

awesome-cyber-security

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

awesome-foundry

A curated list of awesome of the Foundry development framework.

awesome-risk-control

风控知识总结

better_automation

tweepy-self, Google, googleapis, smshub

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

burpcrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).

bypass

免杀shellcode

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2019-2725

CVE-2019-2725 命令回显

dailytask

每日签到任务

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

dnslog-platform-golang

DNSLOG平台 golang 一键启动版

forge-poc-templates

fortify_rule

Decode Fortify Rule Bin File Get XML File

getmail

利用NTLM Hash读取Exchange邮件

go_struts2

一款Python 3编写的Struts2安全检测集成工具

godnslog

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

i-s00n

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

imaotai

i茅台app 每日自动预约 抢茅台

javasecinterview

打造最强的Java安全研究与安全开发面试题库，帮助师傅们找到满意的工作

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

kerberosuserenum

Kerberos accounts enumeration taking advantage of AS-REQ

ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

medusa

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

mysqlmonitor

Mysql 语句执行记录监控

okhttplogger-frida

Frida 实现拦截okhttp的脚本