z3r0yu

Awesome-CobaltStrike. List of Awesome CobaltStrike Resources

CyberSecurityRSS. CyberSecurityRSS: A collection of cybersecurity rss to make you better!

Berserker. A list of useful payloads for Web Application Security and Pentest/CTF

mac-initialize. 💻 Mac Initial Configuration Guide（V3），macOS M1/M2 Initial for Cyberspace Security Practitioners

RedTeam_CheetSheets. RedTeam参考，修改自Ridter的https://github.com/Ridter/Intranet_Penetration_Tips

How-to-Hack-Like-a-Pornstar. 《How to Hack Like a Pornstar》中文翻译

BugBounty. web fuzzing && bug hunter

Open-PoC. PoC for pocsuite3 and nuclei

ZEROScan. Multi-Thread Vulnerability Verify Framework

xrecon. xrecon is a powerful web fingerprinting tool with CDN detection capabilities

ghtracker. CLI tool for tracking dependents repositories and sorting result by Stars ⭐

dotfiles. My personal macOS configuration

Caesar. 一个全新的敏感文件发现工具

CVE-2021-43798. Grafana Arbitrary File Reading Vulnerability

anew. A tool for adding new lines to files, skipping duplicates and written in Rust!

CVE_Request. only for request cve

dfimage. Reverse-engineer a Dockerfile from a Docker image.

pocsuite3-goby. pocsuite3 goby plugin

Cobra-RE. Cobra-W -> Cobra-RE 将进一步提升漏洞发现的准确性并降低漏报率（弃坑了）

CVE-2022-22965. Spring4Shell (CVE-2022-22965)

CVE-2021-41277. Go

crawlergo. A powerful browser crawler for web vulnerability scanners

AggressorScripts. update AggressorScripts to 2020

IMC_AutoLogin. 一个用于登陆IMC（网页版锐捷）的python小脚本

zer0yu. AboutME

Go-Learning-With-Hack. Go-Learning-With-Hacker--go语言HackTools开发教程从入门到入狱

SomePoC. Python

Pentest_Note. 渗透测试常规操作记录

awesome-burp-extensions. A curated list of amazingly awesome Burp Extensions

bk_spider. 爬取百度百科上面人物信息的小爬虫

POC-T. 渗透测试插件化并发框架

CTF_web. CSS

SafeBox. Java

nuclei. 对nuclei项目源码的阅读和注解

CrossC2. generate CobaltStrike's cross-platform payload

CTFENV. 为应对CTF比赛而搭建的各种环境

checkdomain. 对收集得到的子域名进行有效筛选

Pocsuite. More powerfull Pocsuite.

subfinder. Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

jalangi2. Dynamic analysis framework for JavaScript

chromium_for_spider. 为漏扫动态爬虫定制的浏览器

linux-80211n-csitool-supplementary. 802.11n CSI Tool based on iwlwifi and Linux-2.6

pentestEr_Fully-automatic-scanner. 定向全自动化渗透测试

zer0yu.github.io. HTML

BurpBounty. Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

php-cfg. A Control Flow Graph implementation in PHP

unserchain. PHP

yaklang. A programming language exclusively designed for cybersecurity

JNDIScan. 无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

Gososerial. 参考著名漏扫XRAY的代码，无需Java环境直接从二进制角度构造Ysoserial的Payload

fracker. PHP function tracker