vulnerability · GitHub Topics | GitHub 中文社区

#夺旗赛 (CTF) 和网络安全资源# 该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass web-application hacking vulnerability bounty methodology privilege-escalation penetration-testing

Python61.49 k

4 天前

trivy

Aqua Security@aquasecurity

一个漏洞扫描工具，可用于扫描容器镜像、系统文件、Git仓库、以及配置和硬编码密钥等

security security-tools docker containers vulnerability-scanners vulnerability-detection vulnerability golang go kubernetes

Go23.79 k

3 小时前

xray

Chaitin Tech@chaitin

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

security vulnerability vulnerability-scanner passive-vulnerability-scanner xss sqlinjection poc

Vue10.44 k

24 天前🇨🇳

grype

@anchore

grype 是一款针对容器镜像和文件系统的漏洞扫描器

containers security vulnerability docker golang go static-analysis container-image tool oci

Go8.86 k

8 小时前

ysoserial

@frohoff

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

翻译 - 概念证明工具，用于生成利用不安全的Java对象反序列化的有效负载。

java deserialization gadget exploit javadeser jvm serialization poc vulnerability

Java7.81 k

8 个月前

cve

@trickest

整理并更新最新 CVE(安全漏洞) 及其 POC （漏洞证明）

poc cve cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security exploit security

HTML6.59 k

9 小时前

HowToHunt

@KathanP19

Collection of methodology and test case for various web vulnerabilities.

翻译 - 寻找该漏洞时需要做的一些教程和事情。

vulnerability tutorials bughunting-methodology bugbounty bugbountytips

6.14 k

4 个月前

SpringBootVulExploit

@LandGrey

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

springboot springboot-actuator-rce rce spring-boot-vulnerability springcloud spring-vulnerability vulnerability spring-actuator-vulnerability

Java5.8 k

4 年前🇨🇳

faraday

Faraday@infobyte

Open Source Vulnerability Management Platform

翻译 - 协同渗透测试和漏洞管理平台

devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management

Python5.05 k

1 天前

exphub

@zhzyker

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-201...

翻译 - Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

weblogic tomcat exploit poc vulnerability exp webshell drupal getshell nexus

Python4.13 k

4 年前

dalfox

HAHWUL@hahwul

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

翻译 - 🦊DalFox（XSS的查找器）/基于golang的参数分析和XSS扫描工具

xss security bugbounty bugbounty-tool golang xss-scanner devsecops cicd-pipeline vulnerability xss-detection

Go3.77 k

6 天前

openvas-scanner

@greenbone

This repository contains the scanner component for Greenbone Community Edition.

翻译 - 开放式漏洞评估扫描仪-Greenbone漏洞管理（GVM）扫描仪

openvas vulnerability vulnerability-scanners vulnerability-detection vulnerability-assessment scanner vulnerability-management greenbone greenbone-vulnerability-management gvm

Rust3.37 k

10 天前

vulnerability-Checklist

@Az0x7

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

bugbounty security sqlinjection vulnerability vulnerability-checklist web-vulnerability

2.67 k

9 个月前

hacking-resources

@Lifka

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

翻译 - 窃取资源和备忘单。参考资料，工具，脚本，教程和其他可帮助进攻和防御安全专业人员的资源。

hacking malware osint gathering powershell vulnerability hacker tools social-engineering network-monitoring

1.91 k

5 个月前

vulnx

@anouarbensaad

#网络爬虫# vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collect...

翻译 - vulnx🕷️是一个智能的机器人自动外壳注入器，可以检测多种类型的cms中的漏洞{`wordpress，joomla，drupal，prestashop ..}

crawler information-gathering cms-detector cloudflare-detection bot pentest wp-scanner auto-exploiter vulnerability hacking

Python1.9 k

1 年前