一个各类漏洞POC知识库

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率，用Go语言完全重构了原Python版本。

In-depth Attack Surface Mapping and Asset Discovery

短信轰炸/短信测压/ | 一个健壮免费的python短信轰炸程序，专门炸坏蛋蛋，百万接口，多线程全自动添加有效接口，支持异步协程百万并发，全免费的短信轰炸工具！！hongkonger开发全网首发！！

护网漏洞汇总

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

IBM Developer 中文网站文章备份

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

Over 200 terminal color schemes/themes for iTerm/iTerm2. Includes ports to Terminal, Konsole, PuTTY, Xresources, XRDB, Remina, Termite, XFCE, Tilda, FreeBSD VT, Terminator, Kitty, MobaXterm, LXTerm…

A byte code analyzer for finding deserialization gadget chains in Java applications

Telegram群合集，如果有更多好玩的telegram群，欢迎在 issue 提出或者pull requests

🐒 The Microservice API Gateway

OpenResty/Nginx Gateway for API Monitoring and Management.

Aggressor Script to launch IE driveby for CVE-2018-4878

Meltdown/Spectre PoC src collection.

CVE-2017-17215 HuaWei Router RCE (NOT TESTED)

Vulnerability scanner for Linux/FreeBSD, agentless, written in Go

一个自动化渗透框架

Arch-Linux-Install-Script

Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告

linux-kernel-exploits Linux平台提权漏洞集合

some learning notes about Linux Security

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Code + documentation for the Grey Noise API

解密好的AWVS10.5 data/script/目录下的脚本

百合网运维综合管理平台（python+flask框架+cmdb+scheduler+salt)，已经成功运行2年有余，基本能够实现日常运维80%以上的重复工作。因本系统依赖底层数据和众多第三方模块，部署运行难度比较大，建议仅用于研究代码！

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web A…