安服吗喽化工具

企业官方网站模板（响应式）

企业官网模板html，公司官网模板，单页bootstrap官网模板

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Python wrapper for the GitLab API

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

CVE-2018-2628

Source code about machine learning and security.

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

NetRipper - Smart traffic sniffing for penetration testers

Git All the Payloads! A collection of web attack payloads.

A fast sub domain brute tool for pentesters

A curated list of awesome malware analysis tools and resources

一键安装 shadowsocks，支持 chacha20-ietf-poly1305 加密方式

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

xsec-ip-database为一个恶意IP和域名库（Malicious ip database）

XSStrike is a program which can crawl, fuzz and bruteforce parameters for XSS. It can also detect and bypass WAFs.

Cuckoo Sandbox is an automated dynamic malware analysis system

乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

The new Cuckoo Monitor.

NagaScan is a distributed passive scanner for Web application.

Django + Postgres + Redis + Celery + Celery Beat + WebSocket server