PeiQi

PeiQi-WIKI-Book. 面向网络安全从业者的知识文库🍃 (停止更新)

HackJava. 《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

AboutSecurity. 用于渗透测试和红队基础设施建设的 payload 和 bypass 字典。A list of payload and bypass lists for penetration and red team infrastructure build.

Lens. 针对区块链语言 Solidity / Move 的代码安全审计小工具

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

nuclei. Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

codeql. CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

Caesar. 一个全新的敏感文件发现工具

yao. Yao A low code engine to create web services and dashboard.

goblin. 一款适用于红蓝对抗中的仿真钓鱼系统

sentinel-cendertron. Cendertron = Crawler + cendertron, Crawl AJAX-heavy client-side Single Page Applications (SPAs), deploying with docker, focusing on scraping requests(page urls, apis, etc.), followed by pentest tools(Sqlmap, etc.). Cendertron can be used for extracting requests(page urls, apis, etc.) from your Web 2.0 page.