wsecz Goto Github PK

2023hvv

2023 HVV情报速递~

android-getapkinfo

获取Android应用基本信息的工具集

antsword-loader

AntSword 加载器

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

bluelotus_xssreceiver

bluelotus_xssreceiver-1

XSS平台 CTF工具 Web安全工具

bu-rp-loader-keygen

Bu-rp Su-ite Pro Loader & Keygen

cnvd_general_assets

配合爱企查和fofa实现注册资本大于5000w公司的公网通用资产查询搜索，方便证书挖掘

dict-hub

红队字典：默认凭证、弱用户名、弱口令、弱Web路径

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

free-programming-books-zh_cn

:books: 免费的计算机编程类中文书籍，欢迎投稿

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

goscan

GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用

hexo-theme-next

Elegant theme for Hexo.

jd_seckill

京东茅台抢购，不支持其他商品！愿大家与黄牛站在同一个起跑线，公平的参与这场抢茅大赛。

jsphorse

结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4jscanner

mind-map

超详细的渗透测试思维导图

nali

An offline tool for querying IP geographic information and CDN provider.一个查询IP地理信息和CDN服务提供商的离线终端工具.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

shirohacker

只属于你一人的Shiro反序列化漏洞

shuize_0x727

信息收集自动化工具

subdomainsbrute

A fast sub domain brute tool for pentesters

trackray

溯光 (TrackRay) 3 Beta 版插件式渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|AWVS|NMAP|Metasploit）

web-security-learning

Web-Security-Learning

wsecz.github.io