Bypass007

应急响应实战笔记，一个安全工程师的自我修养。

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

从0开始学安全，注重实战+技巧的运用，分享各种安全攻防干货，包括但不限于：Web安全、代码审计 、内网渗透、企业安全等。

Nessus中文报告自动化脚本

Record some Vulnerabilities

My Github profile page

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

For an introductory tutorial on how to use Jenkins to build a simple Java application with Maven.

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploit

Use python to manage, produce and consume data with Aliyun Log Service.

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Scanner for CVE-2020-0796 - SMBv3 RCE

Impacket is a collection of Python classes for working with network protocols.

Redis 4.x & 5.x RCE