Kubernetes POC for utilizing write mount to /var/log for getting a root on the host

Managed code hooking template.

Browser-based code runner that can be embedded as an iframe or used as a library.

🐉
A tool for managing JavaScript projects with multiple packages.

A Docker image that combines the strength of four popular Java decompilers (CFR, Fernflower, Krakatau, and Procyon)
🚀
🔨

A container repository for my public web hacks!

一款适用于红蓝对抗中的仿真钓鱼系统

Mirror of Apache log4j

A blazing fast multithreaded ROP Gadget finder. ropper / ropgadget alternative

（与本人兴趣强相关的）各种安全or计算机资料收集

Covenant is a collaborative .NET C2 framework for red teamers.

Wazuh - The Open Source Security Platform

cmd2shellcode

bro-2.6.1 + NTP analyzer

UAC_wenpon

Unexpected information 是用于标记请求包中的一些敏感信息、JS接口和一些特殊字段的BurpSuite 插件。

⭐
A curated list of awesome UDFs, example scripts, tools and useful resources for AutoIt.

A system that may trick hackers. 一个也许能骗到黑客的系统。

Zscan a scan blasting tool set

【Go 从入门到实战】学习笔记，从零开始学 Go、Gin 框架，基本语法包括 26 个Demo，Gin 框架包括：Gin 自定义路由配置、Gin 使用 Logrus 进行日志记录、Gin 数据绑定和验证、Gin 自定义错误处理、Go gRPC Hello World... 持续更新中...

Windows 10 LPE (UAC Bypass) in Windows Store (WSReset.exe)

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

My musings in C and offensive tooling

Allows the memory injection of DLLs into v2game.exe. USE THIS PROGRAM AT YOUR OWN RISK! DLL INJECTION CAN BE USED TO INJECT MALWARE! I AM NOT RESPO…

Clone running process with ZwCreateProcess

中国蚁剑后渗透框架

Our PoC for the vulnerable products

Clone running process with ZwCreateProcess

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

A curated list of awesome Kubernetes security resources

Useful utilities for Electron apps and modules

bpf 学习仓库

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

The Next.js Static Site Generator

PDF Reader in JavaScript

OSCP

Applied Offensive Programming: Build your own RedTeam C2

Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and other post-exp…

Production-Grade Container Scheduling and Management

Phish password protected Excel-Files

Collection of some of my own tools with other great open source tools out there packaged into a powershell module

网络安全类公众号推荐，欢迎大家推荐

一款基于BurpSuite的被动式FastJson检测插件

flash.cn钓鱼页（中文+英文）

Offensive tooling notes and experiments in AutoIt v3 (https://www.autoitscript.com/site/autoit/)

donLoader is a shellcode loader creation tool that uses donut to convert executable payloads into shellcode to evade detection on disk.

udp flood 和 cc 类型 DDOS工具集合

The new bridge between Burp Suite and Frida!

这是一个用于显示当前网速、CPU及内存利用率的桌面悬浮窗软件，并支持任务栏显示，支持更换皮肤。

Collection of almost 40.000 javascript malware samples

Collection of android malware samples

A Repositories of malicious code (ONLY FOR EDUCATIONAL PURPOSE)

A repository that includes all the important wordlists used while bug hunting.

你管这破玩意叫操作系统源码 — 像小说一样品读 Linux 0.11 核心代码