xiaoz-hc Goto Github PK

apk-detector

提取apk特征

awd_ctf_platform

一个简单的AWD训练平台

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

bfe

Open-source layer 7 load balancer derived from proprietary Baidu FrontEnd

binarywaf

CTF线下赛流量记录工具

clang-llvm-tutorial

clang & llvm examples, e.g. AST Interpreter, Function Pointer Analysis, Value Range Analysis, Data-Flow Analysis, Andersen Pointer Analysis, LLVM Backend...

code-audit-challenges

Code-Audit-Challenges

crypt_homework

ctfenv

为应对CTF比赛而搭建的各种环境

easyxsspayload

XssPayload List . Usage:

elfparser

Cross Platform ELF analysis

exploit-framework

:fire: An Exploit framework for Web Vulnerabilities written in Python

explorer

Open source unified blockchain explorer

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

information-security

A place where I can create, collect and share tooling, resources and knowledge about information security.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

papertime

信息安全与软件工程方面会议、期刊征稿时间统计

pwnme

二进制渗透题目汇总

pyinstxtractor

PyInstaller Extractor

rdns-ng

A reverse DNS lookup tool for a range of given IPs or a whole subnet.

redtool

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

resume

个人中文简历 Latex 源码 https://hijiangtao.github.io/

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

security-ppt

大安全各领域各公司各会议分享的PPT

shadowsocks-manager

A shadowsocks manager tool for multi user and traffic control.

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sqliscanner

Automatic SQL injection with Charles and sqlmap api

unicode-hax

A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.

vulnerability-repository

日常积累，用以保存学习或比赛中遇到的漏洞复现文件，会有一些基本的说明文件