René's URL Explorer Experiment


Title: GitHub - OSSECFile/collection-document: 优质安全 list · GitHub

Open Graph Title: GitHub - OSSECFile/collection-document: 优质安全 list

X Title: GitHub - OSSECFile/collection-document: 优质安全 list

Description: 优质安全 list. Contribute to OSSECFile/collection-document development by creating an account on GitHub.

Open Graph Description: 优质安全 list. Contribute to OSSECFile/collection-document development by creating an account on GitHub.

X Description: 优质安全 list. Contribute to OSSECFile/collection-document development by creating an account on GitHub.

Opengraph URL: https://github.com/OSSECFile/collection-document

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:2fd298d1-6d9a-0185-cebe-1e80bd797bd7
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idEB9A:305538:380698F:4CFC400:6A54B4FF
html-safe-nonceeb4f975f440d874563f748a7c51b24ebea870efd42d09e67a8cd8ab03f4b2295
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFQjlBOjMwNTUzODozODA2OThGOjRDRkM0MDA6NkE1NEI0RkYiLCJ2aXNpdG9yX2lkIjoiNTE1NzIzOTA0OTY4NjM5ODIwNyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacc8e2060f8ab76946c9fee3fb0780b2553d61c7257ab58a54d9abb75d5505bc5f
hovercard-subject-tagrepository:111559693
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/OSSECFile/collection-document
twitter:imagehttps://opengraph.githubassets.com/761985fef17921ecb5cbb7ff2278bfcb7b6eca515f15cf1a6d71bcf8bf3afbdb/OSSECFile/collection-document
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/761985fef17921ecb5cbb7ff2278bfcb7b6eca515f15cf1a6d71bcf8bf3afbdb/OSSECFile/collection-document
og:image:alt优质安全 list. Contribute to OSSECFile/collection-document development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Noneb9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb
turbo-cache-controlno-cache
go-importgithub.com/OSSECFile/collection-document git https://github.com/OSSECFile/collection-document.git
octolytics-dimension-user_id27811697
octolytics-dimension-user_loginOSSECFile
octolytics-dimension-repository_id111559693
octolytics-dimension-repository_nwoOSSECFile/collection-document
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id102005234
octolytics-dimension-repository_parent_nwotom0li/collection-document
octolytics-dimension-repository_network_root_id102005234
octolytics-dimension-repository_network_root_nwotom0li/collection-document
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release5d343e1152573ef294b28f54e4a14fb5fdb3a5a1
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/OSSECFile/collection-document#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FOSSECFile%2Fcollection-document
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FOSSECFile%2Fcollection-document
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=OSSECFile%2Fcollection-document
Reloadhttps://github.com/OSSECFile/collection-document
Reloadhttps://github.com/OSSECFile/collection-document
Reloadhttps://github.com/OSSECFile/collection-document
Please reload this pagehttps://github.com/OSSECFile/collection-document
OSSECFile https://github.com/OSSECFile
collection-documenthttps://github.com/OSSECFile/collection-document
tom0li/collection-documenthttps://github.com/tom0li/collection-document
Notifications https://github.com/login?return_to=%2FOSSECFile%2Fcollection-document
Fork 0 https://github.com/login?return_to=%2FOSSECFile%2Fcollection-document
Star 0 https://github.com/login?return_to=%2FOSSECFile%2Fcollection-document
Code https://github.com/OSSECFile/collection-document
Pull requests 0 https://github.com/OSSECFile/collection-document/pulls
Actions https://github.com/OSSECFile/collection-document/actions
Projects https://github.com/OSSECFile/collection-document/projects
Wiki https://github.com/OSSECFile/collection-document/wiki
Security and quality 0 https://github.com/OSSECFile/collection-document/security
Insights https://github.com/OSSECFile/collection-document/pulse
Code https://github.com/OSSECFile/collection-document
Pull requests https://github.com/OSSECFile/collection-document/pulls
Actions https://github.com/OSSECFile/collection-document/actions
Projects https://github.com/OSSECFile/collection-document/projects
Wiki https://github.com/OSSECFile/collection-document/wiki
Security and quality https://github.com/OSSECFile/collection-document/security
Insights https://github.com/OSSECFile/collection-document/pulse
https://github.com/OSSECFile/collection-document
Brancheshttps://github.com/OSSECFile/collection-document/branches
Tagshttps://github.com/OSSECFile/collection-document/tags
https://github.com/OSSECFile/collection-document/branches
https://github.com/OSSECFile/collection-document/tags
35 Commitshttps://github.com/OSSECFile/collection-document/commits/master/
https://github.com/OSSECFile/collection-document/commits/master/
OWASP_XSS_Filter_Evasion_Cheat_Sheet_中文版071015.pdfhttps://github.com/OSSECFile/collection-document/blob/master/OWASP_XSS_Filter_Evasion_Cheat_Sheet_%E4%B8%AD%E6%96%87%E7%89%88071015.pdf
OWASP_XSS_Filter_Evasion_Cheat_Sheet_中文版071015.pdfhttps://github.com/OSSECFile/collection-document/blob/master/OWASP_XSS_Filter_Evasion_Cheat_Sheet_%E4%B8%AD%E6%96%87%E7%89%88071015.pdf
README.mdhttps://github.com/OSSECFile/collection-document/blob/master/README.md
README.mdhttps://github.com/OSSECFile/collection-document/blob/master/README.md
安全运维那些洞-Aerfa（脱敏版）.pdfhttps://github.com/OSSECFile/collection-document/blob/master/%E5%AE%89%E5%85%A8%E8%BF%90%E7%BB%B4%E9%82%A3%E4%BA%9B%E6%B4%9E-Aerfa%EF%BC%88%E8%84%B1%E6%95%8F%E7%89%88%EF%BC%89.pdf
安全运维那些洞-Aerfa（脱敏版）.pdfhttps://github.com/OSSECFile/collection-document/blob/master/%E5%AE%89%E5%85%A8%E8%BF%90%E7%BB%B4%E9%82%A3%E4%BA%9B%E6%B4%9E-Aerfa%EF%BC%88%E8%84%B1%E6%95%8F%E7%89%88%EF%BC%89.pdf
渗透图.pdfhttps://github.com/OSSECFile/collection-document/blob/master/%E6%B8%97%E9%80%8F%E5%9B%BE.pdf
渗透图.pdfhttps://github.com/OSSECFile/collection-document/blob/master/%E6%B8%97%E9%80%8F%E5%9B%BE.pdf
READMEhttps://github.com/OSSECFile/collection-document
https://github.com/OSSECFile/collection-document#collection-document
https://github.com/OSSECFile/collection-document#github-list
information security Tools Boxhttps://github.com/tengzhangchao/Sec-Box
awesome-pentest-cheat-sheetshttps://github.com/coreb1t/awesome-pentest-cheat-sheets
Pentesting checklists for various engagementshttps://github.com/netbiosX/Checklists
各种安全相关思维导图整理收集-by-p牛https://github.com/phith0n/Mind-Map
安全思维导图集合https://github.com/SecWiki/sec-chart
Awesome Securityhttps://github.com/sbilly/awesome-security
awesome-web-securityhttps://github.com/qazbnm456/awesome-web-security
Awesome-Hackinghttps://github.com/Hack-with-Github/Awesome-Hacking
awesome-incident-responsehttps://github.com/meirwah/awesome-incident-response
awesome-yarahttps://github.com/InQuest/awesome-yara
awesome-pentesthttps://github.com/enaqx/awesome-pentest
android-security-awesomehttps://github.com/ashishb/android-security-awesome
awesome-malware-analysishttps://github.com/rshipp/awesome-malware-analysis
The toolbox of open source scannershttps://github.com/We5ter/Scanners-Box
Web-Security-Learninghttps://github.com/CHYbeta/Web-Security-Learning
blackhat-arsenal-toolshttps://github.com/toolswatch/blackhat-arsenal-tools
Android-Reports-and-Resourceshttps://github.com/B3nac/Android-Reports-and-Resources
pentest-bookmarkshttps://github.com/riskawarrior/pentest-bookmarks
macOS-Security-and-Privacy-Guidehttps://github.com/xitu/macOS-Security-and-Privacy-Guide
https://github.com/OSSECFile/collection-document#安全部运维
一个人的安全部http://www.freebuf.com/articles/security-management/126254.html
没有钱的安全部之资产安全http://www.jianshu.com/p/572431447613?from=timeline
Linux基线加固https://mp.weixin.qq.com/s/0nxiZw1NUoQTjxcd3zl6Zg
基线检查表&安全加固规范https://xianzhi.aliyun.com/forum/read.php?tid=1702&displayMode=1&page=1&toread=1#tpc
浅谈linux安全加固https://mp.weixin.qq.com/s/y8np-sFzik15x09536QA5w
CentOS 7 主机加固http://www.cnblogs.com/xiaoxiaoleo/p/6678727.html
APACHE 常见加固http://www.0xmh.com/apache-%E5%B8%B8%E8%A7%81%E5%8A%A0%E5%9B%BA/?utm_source=tuicool&utm_medium=referral
GNU/Linux安全基线与加固http://cb.drops.wiki/drops/tips-2621.html
windows服务器安全配置策略https://www.yesck.com/post/528/
15步打造一个安全的Linux服务器https://tom0li.github.io/2017/02/09/2017-2-9-linux%E5%8A%A0%E5%9B%BA-%E7%BF%BB%E8%AF%91/
Tomcat7 加固清单https://threathunter.org/topic/59911277ec721b1f1966e7eb
IIS服务器安全配置http://foreversong.cn/archives/803
企业常见服务漏洞检测&修复整理http://www.mottoin.com/92742.html
黑客入侵应急分析手工排查https://xianzhi.aliyun.com/forum/read/1655.html
某云用户网站入侵应急响应http://www.freebuf.com/articles/network/134372.html
应急toolshttps://github.com/meirwah/awesome-incident-response/blob/master/README_ch.md
Linux服务器应急事件溯源报告http://cb.drops.wiki/drops/tips-12972.html
运维安全概述http://cb.drops.wiki/drops/%E8%BF%90%E7%BB%B4%E5%AE%89%E5%85%A8-8169.html
应急响应小记https://threathunter.org/topic/5943a99c1e3732874e23f996
应急响应小总结http://www.aokisec.com/archives/80/
大型互联网企业入侵检测实战总结https://zhuanlan.zhihu.com/p/31154756
Web日志安全分析浅谈https://xianzhi.aliyun.com/forum/read/1723.html
域名劫持事件发生后的应急响应策略http://www.freebuf.com/articles/security-management/118425.html
我的日志分析之道：简单的Web日志分析脚本 http://www.freebuf.com/sectool/126698.html
攻击检测和防范方法之日志分析http://www.freebuf.com/articles/web/109001.html
Linux应急响应姿势浅谈http://bobao.360.cn/learning/detail/4481.html
安全应急姿势http://rinige.com/index.php/archives/824/
一个人的企业安全建设实践https://xianzhi.aliyun.com/forum/topic/1568/
饿了么运维基础设施进化史https://mp.weixin.qq.com/s?__biz=MzA4Nzg5Nzc5OA==&mid=2651668800&idx=1&sn=615af5f120d1298475aaf4825009cb30&chksm=8bcb82e9bcbc0bff6309d9bbaf69cfc591624206b846e00d5004a68182c934dab921b7c25794&scene=38#wechat_redirect
Apache服务器安全配置http://foreversong.cn/archives/789
B站日志系统的前世今生https://mp.weixin.qq.com/s/onrBwQ0vyLJYWD_FRnNjEg
爱奇艺业务安全风控体系的建设实践https://mp.weixin.qq.com/s/2gcNY0LmgxpYT1K6uDaWtg
美团外卖自动化业务运维系统建设https://tech.meituan.com/digger_share.html
携程安全自动化测试之路http://techshow.ctrip.com/archives/2315.html
0xA1: 新官上任三把火https://zhuanlan.zhihu.com/p/26485293
0xA2 应急响应、防御模型与SDLhttps://zhuanlan.zhihu.com/p/26542790
0xA3 安全域划分和系统基本加固https://zhuanlan.zhihu.com/p/26603906
0xB1 微观安全——一台服务器做安全https://zhuanlan.zhihu.com/p/27363168
0xB2 事件应急——企业内网安全监控概览https://zhuanlan.zhihu.com/p/29816766
0xB3 再谈应急响应Pt.1 unix主机应急响应 elknothttps://zhuanlan.zhihu.com/p/29958172
https://github.com/OSSECFile/collection-document/blob/master
https://github.com/OSSECFile/collection-document/blob/master
https://github.com/OSSECFile/collection-document#src
SRC漏洞挖掘小见解http://www.mottoin.com/95043.html
面向SRC的漏洞挖掘总结http://blkstone.github.io/2017/05/28/finding-src-vuls/
漏洞挖掘经验分享Saviourhttps://xianzhi.aliyun.com/forum/read/1433.html
tom0li: 逻辑漏洞小结https://tom0li.github.io/2017/07/17/%E9%80%BB%E8%BE%91%E6%BC%8F%E6%B4%9E%E5%B0%8F%E7%BB%93/
我的SRC之旅https://mp.weixin.qq.com/s/2ORHnywrxXPexviUYk7Ccg
浅析通过"监控"来辅助进行漏洞挖掘https://bbs.ichunqiu.com/thread-28591-1-1.html
威胁情报-生存在SRC平台中的刷钱秘籍https://bbs.ichunqiu.com/article-921-1.html
各大SRC中的CSRF技巧https://bbs.ichunqiu.com/forum.php?mod=viewthread&tid=28448&highlight=src
YSRC众测之我的漏洞挖掘姿势https://bbs.ichunqiu.com/article-655-1.html
常见Web源码泄露总结http://www.mottoin.com/95749.html
SRC的漏洞分析https://bbs.ichunqiu.com/thread-19745-1-1.html
记一次失败的0元单的挖掘历程与一处成功的XSS案例https://bbs.ichunqiu.com/article-636-1.html
看我如何发现谷歌漏洞跟踪管理平台漏洞获得$15600赏金http://www.freebuf.com/articles/web/152893.html
分享一个近期遇到的逻辑漏洞案例http://www.freebuf.com/vuls/151196.html
未授权访问漏洞总结https://www.secpulse.com/archives/61101.html
端口渗透总结http://docs.ioin.in/writeup/blog.heysec.org/_archives_577/index.html
https://github.com/OSSECFile/collection-document#信息收集
信息收集之SVN源代码社工获取及渗透实战https://xianzhi.aliyun.com/forum/topic/165/
乙方渗透测试之信息收集http://www.cnnetarmy.com/%E4%B9%99%E6%96%B9%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B9%8B%E4%BF%A1%E6%81%AF%E6%94%B6%E9%9B%86/
tom0li:漫谈信息收集https://tom0li.github.io/2017/09/25/%E6%BC%AB%E8%B0%88%E5%89%8D%E6%9C%9F%E4%BF%A1%E6%81%AF%E6%94%B6%E9%9B%86/
透过cdn找目标真实iphttps://klionsec.github.io/2014/12/13/bypasscdn/
安全帮“大型目标渗透－01信息搜集https://xianzhi.aliyun.com/forum/read/1675.html
浅谈Web渗透测试中的信息收集http://www.freebuf.com/articles/web/142767.html
Kali Linux渗透基础知识整理（一）：信息搜集http://www.freebuf.com/sectool/109944.html
渗透测试教程：如何侦查目标以及收集信息？嘶吼https://xianzhi.aliyun.com/forum/read/1940.html
我眼中的渗透测试信息搜集https://bbs.ichunqiu.com/thread-16020-1-1.html
乙方渗透测试之信息收集http://www.cnnetarmy.com/%E4%B9%99%E6%96%B9%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B9%8B%E4%BF%A1%E6%81%AF%E6%94%B6%E9%9B%86/
从phpinfo中能获取哪些敏感信息http://www.am0s.com/penetration/322.html
透过F5获取服务器真实内网IPhttps://threathunter.org/topic/5940c85d9c58e020408a79fe
渗透神器系列 搜索引擎https://thief.one/2017/05/19/1/
[红日团队]安全攻城师系列文章－敏感信息收集http://www.mottoin.com/99951.html
论二级域名收集的各种姿势https://mp.weixin.qq.com/s/ardCYdZzaSjvSIZiFraWGA
WEB应用中的信息泄漏以及攻击方法http://www.4hou.com/info/news/3926.html
实例演示如何科学的进行子域名收集http://bobao.360.cn/learning/detail/4119.html
挖掘漏洞的高级方法和思维http://www.4hou.com/vulnerable/8376.html
渗透测试工程师子域名收集指南http://www.4hou.com/technology/8535.html
https://github.com/OSSECFile/collection-document#渗透
渗透标准https://www.processon.com/view/583e8834e4b08e31357bb727
web渗透基本流程小结https://klionsec.github.io/2017/05/20/web-pentest-options/
从目录信息泄露到渗透内网https://xianzhi.aliyun.com/forum/read/1649.html
域渗透基础简单信息收集 基础篇https://xianzhi.aliyun.com/forum/read/805.html
Web Service 渗透测试从入门到精通http://bobao.360.cn/learning/detail/3741.html
渗透技巧——Windows系统远程桌面的多用户登录https://3gstudent.github.io/3gstudent.github.io/%E6%B8%97%E9%80%8F%E6%8A%80%E5%B7%A7-Windows%E7%B3%BB%E7%BB%9F%E8%BF%9C%E7%A8%8B%E6%A1%8C%E9%9D%A2%E7%9A%84%E5%A4%9A%E7%94%A8%E6%88%B7%E7%99%BB%E5%BD%95/
渗透技巧之隐藏自己的工具https://github.com/wangbooth/security_circle_2017/blob/master/51122255581554.md
https://github.com/OSSECFile/collection-document#后渗透
针对 win 的入侵日志简单处理https://klionsec.github.io/2017/05/19/wevtutil/
Windows环境下的信息收集https://mp.weixin.qq.com/s/37xtTdjVetMg5P1WaJvYvA
后渗透攻防的信息收集https://www.secpulse.com/archives/51527.html
Windows 日志攻防之攻击篇https://threathunter.org/topic/593eb1bbb33ad233198afcfa
从活动目录中获取域管理员权限的6种方法http://www.4hou.com/technology/4256.html
https://github.com/OSSECFile/collection-document#xxe
XXE (XML External Entity Injection) 漏洞实践http://www.mottoin.com/101806.html
如何挖掘Uber网站的XXE注入漏洞http://www.mottoin.com/86853.html
XXE被提起时我们会想到什么http://www.mottoin.com/88085.html
XXE漏洞的简单理解和测试http://www.mottoin.com/92794.html
xxe漏洞检测及代码执行过程http://www.cnblogs.com/wfzWebSecuity/p/6681114.html
浅谈XXE漏洞攻击与防御http://thief.one/2017/06/20/1/
XXE漏洞分析http://www.4o4notfound.org/index.php/archives/29/
XML实体注入漏洞攻与防http://www.hackersb.cn/hacker/211.html
XML实体注入漏洞的利用与学习http://uknowsec.cn/posts/notes/XML%E5%AE%9E%E4%BD%93%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%88%A9%E7%94%A8%E4%B8%8E%E5%AD%A6%E4%B9%A0.html
XXE注入:攻击与防御 - XXE Injection: Attack and Preventhttp://le4f.net/post/xxe-injection-attack_and_prevent
黑夜的猎杀-盲打XXEhttps://xianzhi.aliyun.com/forum/read/1837.html
Hunting in the Dark - Blind XXEhttps://blog.zsec.uk/blind-xxe-learning/
XMLExternal Entity漏洞培训模块https://www.sans.org/freading-room/whitepapers/application/hands-on-xml-external-entity-vulnerability-training-module-34397
XXE漏洞攻防之我见http://bobao.360.cn/learning/detail/3841.html
XXE漏洞利用的一些技巧http://www.91ri.org/17052.html
神奇的Content-Type——在JSON中玩转XXE攻击http://bobao.360.cn/learning/detail/360.html
XXE-DTD Cheat Sheethttps://web-in-security.blogspot.jp/2016/03/xxe-cheat-sheet.html
https://github.com/OSSECFile/collection-document#xss
前端防御从入门到弃坑--CSP变迁https://paper.seebug.org/423/
XSS测试备忘录http://momomoxiaoxi.com/2017/10/10/XSS/
https://github.com/OSSECFile/collection-document#jsonp
JSONP注入解析http://www.freebuf.com/articles/web/126347.html
利用JSONP跨域获取信息http://bobao.360.cn/learning/detail/3848.html
漫谈同源策略攻防http://bobao.360.cn/learning/detail/3848.html
https://github.com/OSSECFile/collection-document#android
Android启动过程的分析http://www.4hou.com/mobile/7373.html
360加固宝加固分析和脱壳教程解析https://mp.weixin.qq.com/s/xSe2Zrv9Ev4qRaN99YmnRA
AndroidManifest.xml文件安全探索https://bbs.ichunqiu.com/thread-26612-1-1.html
逆向加固的apk详细教程https://www.secquan.org/Discuss/90
常见app加固厂商脱壳方法研究http://docs.ioin.in/writeup/www.mottoin.com/_89035_html/index.html
分析某直播App的协议加密原理以及调用加密方法进行协议参数构造http://www.wjdiankong.cn/android%E9%80%86%E5%90%91%E4%B9%8B%E6%97%85-%E5%88%86%E6%9E%90%E6%9F%90%E7%9B%B4%E6%92%ADapp%E7%9A%84%E5%8D%8F%E8%AE%AE%E5%8A%A0%E5%AF%86%E5%8E%9F%E7%90%86%E4%BB%A5%E5%8F%8A%E8%B0%83%E7%94%A8/
初探android app安全测试http://docs.ioin.in/writeup/blog.heysec.org/_archives_950/index.html
通过 WebView 攻击 Android 应用https://zhuanlan.zhihu.com/p/28107901
在Android N上对Java方法做hook遇到的坑http://rk700.github.io/2017/06/30/hook-on-android-n/
Android安全项目入门篇 红日https://mp.weixin.qq.com/s?__biz=MzI4NjEyMDk0MA==&mid=2649846643&idx=1&sn=0286e8f1b3e6da0acbd129cb248eac2a
Android App常见逆向工具和使用技巧http://bobao.360.cn/learning/detail/3126.html
木马APP的简单分析https://bbs.ichunqiu.com/thread-27661-1-1.html?from=sec
android_app_security_checklisthttps://github.com/b-mueller/android_app_security_checklist
Android签名机制简介http://docs.ioin.in/writeup/www.arkteam.net/fa860d69-16c4-4ed1-8fd7-06fbab513d97/index.html
再谈APP网络端口开放问题https://bigniu.com/article/view/10
移动APP安全测试要点http://blog.nsfocus.net/mobile-app-security-security-test/
基于系统调用日志的 Android 恶意软件检测方法http://www.4hou.com/technology/7856.html
VirtualApphttps://github.com/asLody/VirtualApp/blob/master/CHINESE.md
Android组件安全https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247484387&idx=1&sn=7264428205276452d40c1ef7b1ed0dcc&chksm=ec1e33cbdb69badd00794f81caa43e5d62e0dc9bb7b9baa9d4c3c9eb64a3a0a18613356bf584#rd
内网穿透——ANDROID木马进入高级攻击阶段（二）http://blogs.360.cn/360mobile/2017/05/25/analysis_of_milkydoor/
Android代码混淆技术总结（一）http://www.droidsec.cn/android%E4%BB%A3%E7%A0%81%E6%B7%B7%E6%B7%86%E6%8A%80%E6%9C%AF%E6%80%BB%E7%BB%93%EF%BC%88%E4%B8%80%EF%BC%89/
Android 渗透测试学习手册（一）Android 安全入门https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282048&idx=1&sn=e17505bda5734a97e869cca787020dd7&scene=0#wechat_redirect
Android 渗透测试学习手册（二）准备实验环境https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282050&idx=1&sn=b65d1266cfbc2afdc912b97065fb6780&scene=0#wechat_redirect
Android 渗透测试学习手册（三）Android 应用的逆向和审计https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282069&idx=2&sn=c5c8392504600df207d2a59f750e0725&scene=0#wechat_redirect
Android 渗透测试学习手册（四）对 Android 设备进行流量分析https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282091&idx=2&sn=fc3486b8df2249158b258e679758cbd4&scene=0#wechat_redirect
Android 渗透测试学习手册（五）Android 取证https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282093&idx=1&sn=4f6272f90b0fdbf04a381d66f46d6c01&scene=0#wechat_redirect
Android 渗透测试学习手册（七）不太知名的 Android 漏洞https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282104&idx=1&sn=00918a40555200377ec83a20b6f86101&scene=0#wechat_redirect
Android 渗透测试学习手册（八）ARM 利用https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282104&idx=1&sn=00918a40555200377ec83a20b6f86101&scene=0#wechat_redirect
Android 渗透测试学习手册（九）编写渗透测试报告https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458282109&idx=2&sn=a31aaf55970d2b58d2231406feccaa12&scene=0#wechat_redirect
浅入浅出 Android 安全https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458281912&idx=1&sn=f7f30e1a7f2d24d97d2acecbd5cb2497&scene=0#wechat_redirect
实战教你怎么拿到女神的手机号，渗透某偷红包apphttps://www.t00ls.net/viewthread.php?tid=39902&highlight=app
进行一次简单的APP测试https://www.t00ls.net/viewthread.php?tid=41527&highlight=app
对某病毒app简单分析https://www.t00ls.net/viewthread.php?tid=37050&highlight=app
Android逆向之动态调试smali代码https://www.t00ls.net/articles-38338.html
记一次分析锁机APP过程（附解锁工具）https://bbs.ichunqiu.com/forum.php?mod=viewthread&tid=10602&highlight=app
IDA调试androidso的.init_array数https://bbs.ichunqiu.com/article-827-1.html
使用Spade Apk后门Hack任意Andorid手机http://www.mottoin.com/90613.html
记一次apk检测http://5alt.me/2017/09/%E8%AE%B0%E4%B8%80%E6%AC%A1apk%E6%A3%80%E6%B5%8B/
脱掉“360加固”的壳http://www.wjdiankong.cn/apk%E8%84%B1%E5%A3%B3%E5%9C%A3%E6%88%98%E4%B9%8B-%E8%84%B1%E6%8E%89360%E5%8A%A0%E5%9B%BA%E7%9A%84%E5%A3%B3/
签名加密破除-burp插件在app接口fuzz中的运用http://cb.drops.wiki/drops/papers-17042.html
Android应用安全开发之浅谈网页打开APPhttp://cb.drops.wiki/drops/mobile-15202.html
安卓APP动态调试-IDA实用攻略http://cb.drops.wiki/drops/mobile-5942.html
一次app抓包引发的Android分析记录http://cb.drops.wiki/drops/tips-2871.html
一次app抓包引发的Android分析（续）http://cb.drops.wiki/drops/tips-2986.html
APK签名校验绕过http://cb.drops.wiki/drops/mobile-4296.html
APK瘦身记，如何实现高达53%的压缩效果http://cb.drops.wiki/drops/mobiledev-14289.html
Android安全开发之ZIP文件目录遍历http://cb.drops.wiki/drops/mobile-17081.html
Android Java层的anti-hooking技巧http://cb.drops.wiki/drops/tips-16356.html
Android安全开发之Provider组件安全http://cb.drops.wiki/drops/mobile-16382.html
Android安全开发之浅谈密钥硬编码http://cb.drops.wiki/drops/tips-15870.html
利用cache特性检测Android模拟器http://cb.drops.wiki/drops/tips-13245.html
Android应用安全开发之防范无意识的数据泄露http://cb.drops.wiki/drops/mobile-12469.html
Android Linker学习笔记http://cb.drops.wiki/drops/tips-12122.html
Android平台下二维码漏洞攻击杂谈http://cb.drops.wiki/drops/mobile-10775.html
Android应用方法隐藏及反调试技术浅析http://cb.drops.wiki/drops/tips-9471.html
Android密码学相关http://cb.drops.wiki/drops/tips-6049.html
浅谈Android开放网络端口的安全风险http://cb.drops.wiki/drops/mobile-6973.html
从APK解密到批量获取他人信息http://www.freebuf.com/articles/web/56728.html
APP漏洞挖掘之Content Provider提取数据https://www.secquan.org/Discuss/424
逆向加固的apk详细教程https://www.secquan.org/Discuss/90
一次对APK木马的简单分析https://forum.90sec.org/forum.php?mod=viewthread&tid=8733&highlight=apk
从零开始学Android应用安全测试（Part1）http://www.freebuf.com/news/topnews/60154.html
从零开始学Android应用安全测试（Part2）http://www.freebuf.com/news/topnews/60481.html
从零开始学Android应用安全测试（Part3）http://www.freebuf.com/news/topnews/62750.html
从零开始学Android应用安全测试（Part4）http://www.freebuf.com/news/topnews/63125.html
360最新虚拟壳脱壳后完全修复详细解析http://www.freebuf.com/articles/terminal/152617.html
https://github.com/OSSECFile/collection-document/blob/master
https://github.com/OSSECFile/collection-document#dns
利用Python实现DGA域名检测http://www.freebuf.com/articles/web/145981.html
DNS-Persist: 利用 DNS 协议进行远程控制通信https://github.com/0x09AL/DNS-Persist
本地DNS攻击原理与实例https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247485308&idx=1&sn=35ef757470ec4057babfb898c5ec5c19&chksm=ec1e3754db69be42b44976d6841842c7a42afc227d7dcd6c50bdbf4edcda028ae7cf90ada9a9#rd
error dns responsehttps://ripe75.ripe.net/presentations/20-A-curious-case-of-broken-DNS-responses-RIPE-75.pdf
DNS隧道检测平民解决方案http://www.freebuf.com/articles/network/149328.html
DNS泛解析是怎么被黑客玩坏的http://www.freebuf.com/news/133873.html
DNS Tunneling及相关实现http://www.freebuf.com/sectool/112076.html
DNS 域传送toolshttp://www.freebuf.com/sectool/79315.html
https://github.com/OSSECFile/collection-document#fuzz
https://github.com/OSSECFile/collection-document/blob/master
https://github.com/OSSECFile/collection-document#其他
10大深网搜索引擎http://www.freebuf.com/news/137844.html
在百度网盘上看到上万条车主个人信息，企业、政府高官信息、各种数据https://bbs.ichunqiu.com/article-798-1.html
论如何反击用AWVS的黑客http://www.freebuf.com/news/136476.html
微信Netting-QRLJacking分析利用-扫我二维码获取你的账号权限https://bbs.ichunqiu.com/forum.php?mod=viewthread&tid=25923&highlight=%E4%BA%8C%E7%BB%B4%E7%A0%81
通过二维码传输IP数据http://www.mottoin.com/92345.html
Android平台下二维码漏洞攻击杂谈http://bobao.360.cn/learning/detail/2421.html
过期链接劫持的利用方法探讨http://www.freebuf.com/articles/web/151836.html
那些年我们刷过的SRC之企业邮箱爆破https://www.secquan.org/Discuss/262
一道 CTF 题 get 到的新姿势https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247485297&idx=1&sn=b9d5f80bcd37d1ce0596e1a2c251d9fb&chksm=ec1e3759db69be4f84913826e4b4e5d79461061e0f61a4eb8889aa65909e2ab314391d94f87c#rd
Readme https://github.com/OSSECFile/collection-document#readme-ov-file
Please reload this pagehttps://github.com/OSSECFile/collection-document
Activityhttps://github.com/OSSECFile/collection-document/activity
Custom propertieshttps://github.com/OSSECFile/collection-document/custom-properties
0 forkshttps://github.com/OSSECFile/collection-document/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FOSSECFile%2Fcollection-document&report=OSSECFile+%28user%29
Releaseshttps://github.com/OSSECFile/collection-document/releases
Packages 0https://github.com/orgs/OSSECFile/packages?repo_name=collection-document
Please reload this pagehttps://github.com/OSSECFile/collection-document
Contributorshttps://github.com/OSSECFile/collection-document/graphs/contributors
Please reload this pagehttps://github.com/OSSECFile/collection-document
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.