《iOS安全测试与安全研究》

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

Dump various types of Windows credentials without injecting in any process.

GitHub repository for sysadmin related tools

PowerSploit - A PowerShell Post-Exploitation Framework

Web Attack Cheat Sheet

This repository contains the reference material related to the OpenChain Project

Deserialization payload generator for a variety of .NET formatters

The IKE Scanner

p0f unofficial git repo

📦 Make security testing of K8s, Docker, and Containerd easier.

An open source application scanning tool

Clone this repo to build Frida

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

面向开发人员梳理的代码安全指南

Subdomain enumeration tool with analysis features for discovered domains

sslscan tests SSL/TLS enabled services to discover supported cipher suites

A list of public penetration test reports published by several consulting firms and academic security groups.

阿里云accesskey利用工具

Cloud Security Posture Management (CSPM)

Vulnerability Static Analysis for Containers

中英文敏感词、语言检测、中外手机/电话归属地/运营商查询、名字推断性别、手机号抽取、身份证抽取、邮箱抽取、中日文人名库、中文缩写库、拆字词典、词汇情感值、停用词、反动词表、暴恐词表、繁简体转换、英文模拟中文发音、汪峰歌词生成器、职业名称词库、同义词库、反义词库、否定词库、汽车品牌词库、汽车零件词库、连续英文切割、各种中文词向量、公司名字大全、古诗词库、IT词库、财经词库、成语词库、地名词库、…

爆破字典

基于实战沉淀下的各种弱口令字典

🖤 网络安全与渗透测试工具导航

Open source API development ecosystem - https://hoppscotch.io (open-source alternative to Postman, Insomnia)

Java web common vulnerabilities and security code which is base on springboot and spring security

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.