Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)

A useful file search tool

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers

The Memory Process File System

Portspoof

LOLBINs that inject a DLL into a given process ID.

SwiftUI Starter Kit

Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be Appended …

过人 webshell 的生成工具

PoC exploit of CVE-2020-11651 and CVE-2020-11652

Describe how to use ffuf different options with example.

支持AntSword CMDLINUX类型的独立Web服务

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

Astra is a tool to find URLs and secrets inside a webpage/files

前端精读周刊。帮你理解最前沿、实用的技术。

🐶
Kubernetes CLI To Manage Your Clusters In Style!

WPA/WPA2 密码字典，用于 wifi 密码暴力破解

Microsoft Exchange Server Poc

12 weeks, 26 lessons, 52 quizzes, classic Machine Learning for all

Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

A fingerprint generation helper for nuclei network templates

Our PoC for the vulnerable products

一个简单的现代化公司域名使用规律预测及生成工具

Assassin是一款精简的基于命令行的webshell管理工具，它有着多种payload发送方式和编码方式，以及精简的payload代码，使得它成为隐蔽的暗杀者，难以被很好的防御。

备份文件扫描，并自动进行下载

Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.

Windows / Linux Local Privilege Escalation Workshop

OSED course preparation materials.

自动化爬取并自动测试所有swagger接口

The Go programming language

A Security Tool for Enumerating WebSockets

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

A screamingly fast Python 2/3 WSGI server written in C.

A blazingly fast JSON serializing & deserializing library

Backstage is an open platform for building developer portals

ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or …

收集免费的接口服务,做一个api的搬运工

Tomcat的Filter型免杀内存马，主要思路是Bypass各种检查手段

IDA高级技巧 API符号自动识别库 IDASignMaker

A VBA parser and emulation engine to analyze malicious macros.

A BOF for enumerating version information for DLLs associated for a Beacon process.

Ashok is a OSINT Recon Hacking Tool , a.k.a
😍
Swiss Army knife .

Provides In-memory compilation and reflective loading of C# apps for AV evasion.

automated password spraying tool

Simple (relatively) things allowing you to dig a bit deeper than usual.

Checks for signature requirements over LDAP

A tiny little drawing app.

Some notes and examples for cobalt strike's functionality

Active Directory ACL exploitation with BloodHound

A powerful little TUI framework
🏗

An efficient, small mobile key-value storage framework developed by WeChat. Works on Android, iOS, macOS, Windows, and POSIX.

Impacket is a collection of Python classes for working with network protocols.

Markdown editor for vue3, developed by jsx and typescript, dark theme、beautify content by prettier、render articles directly、paste or clip the pictu…