Double08

Phishing catcher using Certstream

基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。此项目初版见：https://github.com/zibility/Remote

An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

In-depth DNS Enumeration and Network Mapping

WebLogic wls9-async反序列化远程命令执行漏洞

github泄露扫描系统

A Burp Suite Extender that try to find sub-domain, similar-domain and related-domain of an organization, not only a domain! 利用burp收集整个企业、组织的域名（不仅仅是单个主域名）的插件

Vulncode-DB project

✨ Finder Toolbar app for macOS to open the current directory in Terminal, iTerm, Hyper or Alacritty.

Too buggy web application

Telnet Honeypot

A low to medium interaction honeypot.

Web-based Traffic and Security Network Traffic Monitoring

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

A toolset to make a system look as if it was the victim of an APT attack

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest)

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

RedTeam资料收集整理

爬虫集合

💖 High available distributed ip proxy pool, powerd by Scrapy and Redis

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

Retrieve and parse whois data for IPv4 and IPv6 addresses

A Python module to bypass Cloudflare's anti-bot page.

开源的金融投资数据提取工具，专注在各类网站上爬取数据，并通过简单易用的API方式使用

刷题训练指南

Java every minor versions.

about learning Spring Boot via examples. Spring Boot 教程、技术栈示例代码，快速简单上手教程。

总结了十篇.Net反序列化文章，持续更新

🚇暗网中文网监控爬虫