翻译国外的@WebBreacher的安全/渗透测试/红队面试题，有部分参考作用
☆283Aug 5, 2023Updated 2 years ago
Alternatives and similar repositories for offensiveinterview
Users that are interested in offensiveinterview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~☆1,972Sep 18, 2021Updated 4 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 4 years ago
- 用于记录分享一些有趣的案例☆865Jan 10, 2022Updated 4 years ago
- BCS（北京网络安全大会）2019 红队行动会议重点内容☆819Sep 4, 2019Updated 6 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆866Jul 21, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 信息安全方面面试清单☆292Feb 2, 2024Updated 2 years ago
- 免杀webshell无限生成工具☆1,287Apr 3, 2020Updated 5 years ago
- Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路☆479Jul 25, 2019Updated 6 years ago
- Burp suite 分块传输辅助插件☆2,029Feb 23, 2022Updated 4 years ago
- MSSQL注入提权,bypass的一些总结☆737Jun 25, 2024Updated last year
- 绿盟科技漏洞扫描器(RSAS)漏洞库☆367May 30, 2019Updated 6 years ago
- RedTeam资料收集整理☆328Dec 10, 2020Updated 5 years ago
- Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…☆2,694Mar 14, 2024Updated 2 years ago
- ATT&CK实操☆373Sep 7, 2019Updated 6 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- 从wooyun中提取的payload，以及burp插件☆841Jun 17, 2022Updated 3 years ago
- 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能☆1,183Nov 10, 2021Updated 4 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,198Oct 17, 2023Updated 2 years ago
- 红队基础设施自动化部署工具☆852Jan 4, 2023Updated 3 years ago
- 瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf☆717Jul 20, 2022Updated 3 years ago
- 上传漏洞fuzz字典生成脚本☆1,270Apr 1, 2021Updated 4 years ago
- 从shodan获取使用了相同favicon.ico的网站☆189Feb 16, 2019Updated 7 years ago
- Cobalt Strike系列☆2,417Dec 3, 2023Updated 2 years ago
- PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist☆663Feb 24, 2021Updated 5 years ago
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Tomcat-Ajp协议文件读取漏洞☆797Mar 3, 2020Updated 6 years ago
- 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo☆816Nov 28, 2022Updated 3 years ago
- Burp被动扫描流量转发插件☆1,459Jun 17, 2024Updated last year
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- Redis 4.x/5.x RCE☆975Nov 30, 2021Updated 4 years ago
- Airbug(空气洞)，收集漏洞poc用于安全产品☆355Sep 26, 2019Updated 6 years ago
- ☆404Feb 28, 2020Updated 6 years ago
- 渗透测试用到的东东☆428May 6, 2020Updated 5 years ago
- 个人域渗透学习笔记☆1,803Feb 7, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- mysql注入,bypass的一些心得☆1,327Jun 25, 2024Updated last year
- 参考《利用分块传输吊打所有WAF》修改的requests的Adapter☆98Jan 31, 2019Updated 7 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆166Apr 5, 2019Updated 6 years ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,389Dec 16, 2022Updated 3 years ago
- 基于burpsuite headless 的代理式被动扫描系统☆95Feb 10, 2020Updated 6 years ago
- RedTeaming知识星球2020年安全知识汇总☆473May 5, 2021Updated 4 years ago
- KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。☆2,382Jan 16, 2026Updated 2 months ago