yut0u Goto Github PK

-cve-2017-10271-

(CVE-2017-10271)Java反序列化漏洞

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021_hvv

2021 hw

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

aes-killer

Burp plugin to decrypt AES Encrypted traffic of mobile apps on the fly

airbug

Airbug(空气洞)，收集漏洞poc用于安全产品

alicloud-tools

阿里云ECS、策略组辅助小工具

aliyun-accesskey-tools

阿里云accesskey利用工具

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

amass

In-depth Attack Surface Mapping and Asset Discovery

angelsword

Python3编写的CMS漏洞检测框架

antsword

AntSword is a cross-platform website management toolkit.

antsword-loader

AntSword 加载器

apache-flink-dashboard-rec

Apache Flink Dashboard未授权访问-远程代码命令执行

api-security

OWASP API Security Project

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api-securityempire

API Security Projecto aims to present unique attack & defense methods in API Security field

apkvulcheck

This is a tool to help androidcoder to check the flaws in their projects.

aptnotes

Various public documents, whitepapers and articles about APT campaigns

aquatone

A Tool for Domain Flyovers

arbitraryfilereadlist

CTF中任意文件读取的fuzz列表 (Arbitrary file read fuzz list in CTF)

arjun

HTTP parameter discovery suite.

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

artillery

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

asamf

AsamF是集成Fofa、Quake、Hunter、Shodan、Zoomeye、Chinaz、0.zone及爱企查的一站式企业信息资产收集、网络资产测绘工具。

attacking_shiro_with_cve_2020_2555

aviator

Antivirus evasion project

avkiller

利用图形化识别技术快速关闭目标机器上的杀毒软件