翻译国外的@WebBreacher的安全/渗透测试/红队面试题，有部分参考作用
☆283Aug 5, 2023Updated 3 years ago
Alternatives and similar repositories for offensiveinterview
Users that are interested in offensiveinterview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~☆2,010May 22, 2026Updated 5 months ago
- BCS（北京网络安全大会）2019 红队行动会议重点内容☆819Sep 4, 2019Updated 7 years ago
- 信息安全方面面试清单☆293Feb 2, 2024Updated 2 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆725Mar 21, 2022Updated 4 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆867Jul 21, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 用于记录分享一些有趣的案例☆867Jan 10, 2022Updated 4 years ago
- Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路☆478Jul 25, 2019Updated 7 years ago
- RedTeam资料收集整理☆327Dec 10, 2020Updated 5 years ago
- MSSQL注入提权,bypass的一些总结☆738Jun 25, 2024Updated 2 years ago
- Burp suite 分块传输辅助插件☆2,025Feb 23, 2022Updated 4 years ago
- 免杀webshell无限生成工具☆1,277Apr 3, 2020Updated 6 years ago
- PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist☆667Feb 24, 2021Updated 5 years ago
- Cobalt Strike系列☆2,432Dec 3, 2023Updated 2 years ago
- 绿盟科技漏洞扫描器(RSAS)漏洞库☆362May 30, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,682Mar 14, 2024Updated 2 years ago
- 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf☆718Jul 20, 2022Updated 4 years ago
- 红队基础设施自动化部署工具☆847Jan 4, 2023Updated 3 years ago
- ATT&CK实操☆371Sep 7, 2019Updated 7 years ago
- 从shodan获取使用了相同favicon.ico的网站☆186Feb 16, 2019Updated 7 years ago
- 从wooyun中提取的payload，以及burp插件☆839Jun 17, 2022Updated 4 years ago
- 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo☆817Nov 28, 2022Updated 3 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,181Nov 10, 2021Updated 4 years ago
- 上传漏洞fuzz字典生成脚本☆1,278Apr 1, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Airbug(空气洞)，收集漏洞poc用于安全产品☆356Sep 26, 2019Updated 7 years ago
- ☆401Feb 28, 2020Updated 6 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,190Oct 17, 2023Updated 3 years ago
- mysql注入,bypass的一些心得☆1,327Jun 25, 2024Updated 2 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆169Apr 5, 2019Updated 7 years ago
- 信息安全实习和校招的面经、真题和资料 减少安全选手找实习/工作的痛苦☆1,185Dec 16, 2019Updated 6 years ago
- 一个关于PHP的代码审计项目☆1,903Sep 17, 2019Updated 7 years ago
- 日常src平台域名收集☆595Jul 11, 2019Updated 7 years ago
- a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志☆240May 8, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- Redis 4.x/5.x RCE☆981Nov 30, 2021Updated 4 years ago
- Burp被动扫描流量转发插件☆1,461Jun 17, 2024Updated 2 years ago
- 渗透测试用到的东东☆429May 6, 2020Updated 6 years ago
- 2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~☆4,614Feb 24, 2023Updated 3 years ago
- 基于burpsuite headless 的代理式被动扫描系统☆96Feb 10, 2020Updated 6 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆454Mar 24, 2022Updated 4 years ago