安全方向知识点(包含web攻防、java攻防、企业安全、内网/域、提权、免杀)
☆49Dec 25, 2024Updated last year
Alternatives and similar repositories for Security-Interview
Users that are interested in Security-Interview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 开发和安全和运营：DevSecOps-Software development (Dev) and Security (Sec) and IT operations (Ops).☆27Apr 13, 2024Updated 2 years ago
- Java安全学习历程☆42Jul 7, 2023Updated 2 years ago
- wscan自用指纹库☆12May 24, 2024Updated last year
- 这是一个强大的端口扫描与漏洞扫描工具☆13Jan 8, 2025Updated last year
- oss存储桶遍历漏洞利用脚本☆93Nov 23, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- QQ登录页面诱导工具，用于获取用户手机号。基于Nuxt4 + Vue3构建，支持全屏网页嵌入、登录窗口弹出和数据管理。☆11Jan 14, 2026Updated 4 months ago
- USB键鼠流量分析工具Gui☆26Aug 8, 2023Updated 2 years ago
- 语雀敏感信息泄露搜索工具☆13Jan 20, 2023Updated 3 years ago
- 终极物联网/工业控制系统侦察工具☆64Jul 13, 2022Updated 3 years ago
- 修改Bug后的ParamSpider，方便各位师傅使用☆13Nov 13, 2024Updated last year
- nacos api bypass & jwt bypass & get all configs☆41Aug 9, 2023Updated 2 years ago
- 红队命令速查 是由棱角社区(Edge Forum) 整理的关于 Red Team 期间所常使用的一些基础命令。☆63Jul 11, 2024Updated last year
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆93Jul 7, 2025Updated 10 months ago
- Tao（道）一款用于java语言函数调用关系生成的工具，致力于提高java代码审计效率。☆11Jul 2, 2024Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- AWD攻防赛脚本集合☆13Dec 6, 2018Updated 7 years ago
- 云函数扫描器☆60Dec 6, 2023Updated 2 years ago
- XXST-白加黑辅助挖掘工具，全程静默运行不影响正常使用☆17Apr 12, 2024Updated 2 years ago
- CVE-2023-38646 Metabase RCE☆55Oct 11, 2023Updated 2 years ago
- 一款强大的 burp 安全测试插件，集成多种安全测试功能，支持自动化扫描和手动测试。☆675Mar 20, 2026Updated 2 months ago
- ☆13Nov 7, 2023Updated 2 years ago
- 整理容器逃逸相关的漏洞和exploits.☆15Apr 17, 2024Updated 2 years ago
- 对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改☆24Apr 19, 2022Updated 4 years ago
- 一款基 于Knife4j 的 Swagger 接口自动化测试未授权工具☆128Apr 29, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- JndiBypass漏洞利用，可动态生成类，防止类注入冲突☆28Aug 16, 2023Updated 2 years ago
- 利用云函数实现端口扫描☆15Nov 17, 2025Updated 6 months ago
- autoDecoder的用法及案例，包含加解密方法、绕waf、替换参数等操作。☆310Jul 28, 2024Updated last year
- Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。☆317Feb 18, 2025Updated last year
- javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手☆277Jun 18, 2024Updated last year
- 集成 heapdump + shiro + fastjson + log4j2 漏洞环境☆13Apr 29, 2025Updated last year
- 基于Agent技术实现的Java内存马查杀、防护工具。☆93Jul 25, 2024Updated last year
- SolGPT智能合约(区块链)漏洞检测大模型 Solidity(Smart Contract) Vulnerability Detection Base on GPT Model☆15Dec 25, 2024Updated last year
- Abandoned - fastjson 1.2.24-1.2.80 poc & vulns env & how to check vul☆96Oct 30, 2023Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 优化后的URLFinder，可以通过自定义的正则表达式，对页面中的各类敏感信息提取☆153Jan 20, 2025Updated last year
- 快速筛选Enscan输出结果中的domain，让你在红蓝攻防中快人一步☆31Aug 13, 2025Updated 9 months ago
- Xtools 是一款 Sublime Text 插件，同时是一款简单的资产处理｜命令行调用工具。☆246Nov 25, 2025Updated 5 months ago
- API Highlighter 是一个用于 BurpSuite 的插件，主要用于 web 应用迭代安全测试时高亮指定的新增接口，该插件最初用 Python 编写，现重构为 Java 版本。☆43Feb 19, 2025Updated last year
- bchecks for burpsuite☆14Oct 9, 2023Updated 2 years ago
- tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含☆288Apr 6, 2025Updated last year
- SingleSC 10.25 红队免杀 于10.23 24日测试 360核晶与火绒均可过！☆25Oct 27, 2023Updated 2 years ago