vulnerability · GitHub Topics | GitHub 中文社区

PayloadsAllTheThings

Swissky@swisskyrepo

#夺旗赛 (CTF) 和网络安全资源#该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass Web app Hacking vulnerability bounty methodology privilege-escalation penetration-testing

Python62.07 k

19 天前

trivy

Aqua Security@aquasecurity

一个漏洞扫描工具，可用于扫描容器镜像、系统文件、Git仓库、以及配置和硬编码密钥等

Security Docker containers vulnerability-scanners vulnerability-detection vulnerability Go Kubernetes Hacktoberfest devsecops misconfiguration Infrastructure as code

Go24.09 k

3 天前

SafeLine

Chaitin Tech@chaitin

#安全#serve as a reverse proxy to protect your web services from attacks and exploits.

Go14.2 k

14 天前

xray

Chaitin Tech@chaitin

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Security vulnerability vulnerability-scanner passive-vulnerability-scanner xss sqlinjection poc

Vue10.52 k

2 个月前🇨🇳

grype

@anchore

grype 是一款针对容器镜像和文件系统的漏洞扫描器

containers Security vulnerability Docker Go static-analysis container-image Tool oci cyclonedx vulnerabilities Hacktoberfest openvex vex

Go9.07 k

1 天前

ysoserial

@frohoff

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

翻译 - 概念证明工具，用于生成利用不安全的Java对象反序列化的有效负载。

Java deserialization gadget Exploit javadeser serialization poc vulnerability

Java7.87 k

9 个月前

cve

@trickest

整理并更新最新 CVE(安全漏洞) 及其 POC （漏洞证明）

poc Common Vulnerabilities and Exposures (CVE)cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security Exploit Security Cybersecurity Hacking pentesting penetration-testing red-team software-vulnerability

HTML6.64 k

9 小时前

HowToHunt

@KathanP19

Collection of methodology and test case for various web vulnerabilities.

翻译 - 寻找该漏洞时需要做的一些教程和事情。

vulnerability tutorials bughunting-methodology Bug Bounty bugbountytips

6.18 k

5 个月前

SpringBootVulExploit

@LandGrey

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Spring Boot springboot-actuator-rce rce spring-boot-vulnerability springcloud spring-vulnerability vulnerability spring-actuator-vulnerability

Java5.82 k

4 年前🇨🇳

faraday

Faraday@infobyte

Open Source Vulnerability Management Platform

翻译 - 协同渗透测试和漏洞管理平台

DevOps penetration-testing vulnerability vulnerability-scanners Security pentesting continuous-scanning Cybersecurity vulnerability-management

Python5.09 k

1 个月前

exphub

@zhzyker

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-201...

翻译 - Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

weblogic tomcat Exploit poc vulnerability exp webshell Drupal getshell nexus

Python4.15 k

4 年前

dalfox

HAHWUL@hahwul

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

翻译 - 🦊DalFox（XSS的查找器）/基于golang的参数分析和XSS扫描工具

xss Security Bug Bounty bugbounty-tool Go xss-scanner devsecops cicd-pipeline vulnerability xss-detection

Go3.81 k

11 天前

openvas-scanner

@greenbone

This repository contains the scanner component for Greenbone Community Edition.

翻译 - 开放式漏洞评估扫描仪-Greenbone漏洞管理（GVM）扫描仪

openvas vulnerability vulnerability-scanners vulnerability-detection vulnerability-assessment scanner vulnerability-management greenbone greenbone-vulnerability-management gvm openvas-scanner greenbone-community-edition foo C techops

Rust3.44 k

17 天前

vulnerability-Checklist

@Az0x7

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Bug Bounty Security sqlinjection vulnerability vulnerability-checklist web-vulnerability

2.75 k

10 个月前

hacking-resources

@Lifka

Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.

翻译 - 窃取资源和备忘单。参考资料，工具，脚本，教程和其他可帮助进攻和防御安全专业人员的资源。

Hacking Malware OSINT gathering PowerShell vulnerability hacker Tool social-engineering network-monitoring

1.93 k

6 个月前

vulnx

@anouarbensaad

#网络爬虫#vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collect...

翻译 - vulnx🕷️是一个智能的机器人自动外壳注入器，可以检测多种类型的cms中的漏洞{`wordpress，joomla，drupal，prestashop ..}

Crawler information-gathering cms-detector cloudflare-detection Bot pentest wp-scanner auto-exploiter vulnerability Hacking

Python1.9 k

2 年前