Ershu1

Advanced

@Ershu1

You'are never ready for what you have to do. You just do it. That makes you ready

2021_Hvv. 2021 hw

1.2k

2023_Hvv.

-Sec. 区块链、智能合约方面的安全学习

AUTO-EARN. 一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

InScan. 边界打点后的自动化渗透工具

SuperWordlist. 基于实战沉淀下的各种弱口令字典

Caesar. 一个全新的敏感文件发现工具

fuzzdb. Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

wooyun-payload. 从wooyun中提取的payload，以及burp插件

2019-Read-article. 2019年网上阅读过的文章记录

SZhe_Scan. 碎遮SZhe_Scan Web漏洞扫描器，基于python Flask框架，对输入的域名/IP进行全面的信息搜集，漏洞扫描，可自主添加POC

nsfocus-rsas-knowledge-base. 绿盟科技漏洞扫描器(RSAS)漏洞库

Medusa. :cat2:美杜莎扫描器（scanner） http://medusa.ascotbe.com

awesome-browser-exploit. awesome list of browser exploitation tutorials

XSS_Cheat_Sheet_2020_Edition. xss漏洞模糊测试payload的最佳集合 2020版

windows-kernel-exploits. windows-kernel-exploits Windows平台提权漏洞集合

xray. 一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

w12scan. 🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

edusrc_POC. 在edusrc平台上对于一些通用漏洞检测时编写的简单python POC脚本

PocList. Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE

w13scan. Passive Security Scanner (被动式安全扫描器)

API-SecurityEmpire. API Security Projecto aims to present unique attack & defense methods in API Security field

HolyTips. A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

CVE-Vulnerability. A record of some vulnerabilities, as well as some detection and exploitation scripts

views 25 projects

Apply