Cloud Security Tools Cloud Infrastructure Entitlement Management (CIEM) Cloud Security Posture Mgmt (CSPM) Cloud Detection and Response (CDR) Cloud Workload Protecti...

OWASP Top 10 and CWE/SANS 25 OWASP Top 10 SANS CWE 25 A1: Injection CWE-78: Improper Neutralization of Special Elements Used in an OS Command (‘...

OWASP Top 10 Parameter Overview Top 25 Parameters Cross-Site Scripting (XSS) Parameters Server-Side Request Forgery (SSRF) Parameters Loca...

Python Crash String List dictionary Tuple Sorted Functions lambda zip, map filter test except RegularExpression Data ...

Python Package 1 example Python Package main.py mypackage/ __init__.py mymodule.py myothermodule.py …a mymodule.py like this… #!/usr/bin/env python3 # Exp...

Asynchronous Programming 异步编程简介 Python Asynchronous model Mastering Concurrency in Python 01. 并发 Concurrency 并发与顺序 Concurrent vs Sequential ...

Web scraping Code test HTMLParser 解析 html Web scraping Code test Target # python main.py url: xx.com 'APT', 'Beds / Bath...

Meow’s CyberAttack - IP Spoofing [toc] IP Spoofing Each IP packet includes a place to specify the destination and source IP addresses. The validity of the source address is never checke...

Meow’s CyberAttack - ARP Poisoning ARP spoofing [toc] ARP ARP resolves the IP addresses to MAC address stores the result in an memory, ARP cache. TCP/IP uses IP address to ...

theHarvester [toc] bacis theharvester -h theharvester -d microsoft.com -l 50 -b google -h myresults.html -d : specific the domain/company name. -l : limit result to 50 -b : defines data so...

sslstrip Encrypted messages are problematic when it comes to capturing traffic. Encryption is intended to be end to end, no way to sit in the middle. Any mechanism to sit in the middle defeat...

[toc] searchsploit command line search tool for Exploit-DB that also allows you to take a copy of Exploit Database with you, everywhere you go. SearchSploit gives you the power to perform detai...

Recon-ng [toc] Recon-ng git clone https://github.com/lanmaster53/recon-ng.git cd recon-ng pip install -r REQUIREMENTS recon-ng marketplace install all i workspaces create tesla workspaces l...

Postman Postman basic Postman的操作环境 Postman install Postman安装 Navigating Postman main modes: Find and replace History ...

[toc] Nmap free download, port scan machines. can reveal what services are running as well as info about the target machine’s operating system. 17-20 sec can scan a range of IP addre...