vulnerability · GitHub Topics

#夺旗赛 (CTF) 和网络安全资源#该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass Web app Hacking vulnerability bounty methodology privilege-escalation penetration-testing cheatsheet 安全 enumeration Bug Bounty redteam payloads Hacktoberfest

Python 63.83 k

5 天前

aquasecurity / trivy

一个漏洞扫描工具，可用于扫描容器镜像、系统文件、Git仓库、以及配置和硬编码密钥等

安全 Docker containers vulnerability-scanners vulnerability-detection vulnerability Go Kubernetes Hacktoberfest devsecops misconfiguration Infrastructure as code

Go 24.97 k

1 天前

The-Art-of-Hacking / h4cker

#Awesome#This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artif...

翻译 - 该存储库主要由Omar Santos维护，并包含与道德黑客/渗透测试，数字取证和事件响应（DFIR），漏洞研究，漏洞利用开发，逆向工程等相关的数千种资源。

Hacking penetration-testing hacking-series Cybersecurity ethical-hacking hacker Exploit exploit-development vulnerability vulnerability-assessment vulnerability-management Awesome Lists training hackers 人工智能 ai-security

Jupyter Notebook 20.17 k

11 天前

chaitin / SafeLine

#安全#SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Go 15.79 k

13 天前

Hacker0x01 / hacker101

#安全#Source code for Hacker101.com - a free online web and mobile security class.

翻译 - Hacker101.com的源代码-免费的在线Web和移动安全类。

教学 Hacking 安全 hackerone hacker101 xss clickjacking csrf web-security session-fixation sql-injection mobile-security vulnerability

SCSS 13.95 k

19 天前

chaitin / xray

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

安全 vulnerability vulnerability-scanner passive-vulnerability-scanner xss sqlinjection poc

Vue 10.67 k

4 个月前

anchore / grype

grype 是一款针对容器镜像和文件系统的漏洞扫描器

containers 安全 vulnerability Docker Go static-analysis container-image 工具 oci cyclonedx vulnerabilities Hacktoberfest openvex vex

Go 9.49 k

13 小时前

frohoff / ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

翻译 - 概念证明工具，用于生成利用不安全的Java对象反序列化的有效负载。

Java deserialization gadget Exploit javadeser serialization poc vulnerability

Java 8.02 k

1 年前

trickest / cve

整理并更新最新 CVE(安全漏洞) 及其 POC （漏洞证明）

poc Common Vulnerabilities and Exposures (CVE)cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security Exploit 安全 Cybersecurity Hacking pentesting penetration-testing red-team software-vulnerability

HTML 6.79 k

17 小时前

nomi-sec / PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

翻译 - 📡POC自动收集GitHub。⚠️要仔细恶意软件。

安全 Common Vulnerabilities and Exposures (CVE)Exploit poc vulnerability

6.77 k

21 小时前

KathanP19 / HowToHunt

Collection of methodology and test case for various web vulnerabilities.

翻译 - 寻找该漏洞时需要做的一些教程和事情。

vulnerability 教程 bughunting-methodology Bug Bounty bugbountytips

6.27 k

7 个月前

daffainfo / AllAboutBugBounty

这些是我从各种渠道收集的bug bounty笔记

Bug Bounty bugbountytips bypass payloads reconnaissance bug Hacking 安全 payload penetration-testing vulnerability Cybersecurity pentest

6.14 k

2 年前

infoslack / awesome-web-hacking

A list of web application security

penetration-testing web-hacking vulnerabilities scanner Hacking hacking-tools metasploit web-security appsec owasp pentesting 安全 vulnerability

6.08 k

3 个月前

LandGrey / SpringBootVulExploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Spring Boot springboot-actuator-rce rce spring-boot-vulnerability springcloud spring-vulnerability vulnerability spring-actuator-vulnerability

Java 5.88 k

4 年前

infobyte / faraday

Open Source Vulnerability Management Platform

翻译 - 协同渗透测试和漏洞管理平台

DevOps penetration-testing vulnerability vulnerability-scanners 安全 pentesting continuous-scanning Cybersecurity vulnerability-management collaboration burpsuite nessus nmap devsecops security-automation orchestration Common Vulnerabilities and Exposures (CVE)appsec

Python 5.24 k

1 个月前

zhzyker / exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-201...

翻译 - Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

weblogic tomcat Exploit poc vulnerability exp webshell Drupal getshell nexus cve-2020-2555 cve-2020-1938 cve-2020-2883 cve-2020-2551 cve-2020-14882

Python 4.18 k

4 年前