Starred repositories
48
stars
written in HTML
Clear filter
本项目旨在分享大模型相关技术原理以及实战经验（大模型工程化、大模型应用落地）
A list of public penetration test reports published by several consulting firms and academic security groups.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
Gather and update all available and newest CVEs with their PoC.
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve…
This repository contains best profile readme's for your reference.
A Security Tool for Bug Bounty, Pentest and Red Teaming.
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）
Web Fuzzing Box - Web 模糊测试字典与一些Payloads
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。
爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)
社会工程学密码生成器，是一个利用个人信息生成密码的工具
Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.
Java漏洞学习笔记 Deserialization Vulnerability
学习安全运营的记录 | The knowledge base of security operation
These are my checklists which I use during my hunting.