0FuzzingQ

blocksec_academy

smart-contract-best-practices

A guide to smart contract security best practices

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Some-PoC-oR-ExP

各种漏洞poc、Exp的收集或编写

POChouse

POC&EXP仓库、hvv弹药库、Nday、1day

fingerprint

各种工具指纹收集分享

python3-cookbook

《Python Cookbook》 3rd Edition Translation

HoneypotDic

蜜罐抓到的Top密码，根据使用频率排序，持续更新中...

bypass

Bypass

BypassAntiVirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

ksubdomain

无状态子域名爆破工具

RedTeamer

红方人员作战执行手册

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

Cobalt_Strike_wiki

Cobalt Strike系列

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

javasec

自己学习java安全的一些总结，主要是安全审计相关

HackJava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

Douyin-Bot

😍 Python 抖音机器人，论如何在抖音上找到漂亮小姐姐？

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

slither

Static Analyzer for Solidity and Vyper

cloud-native-security-book

《云原生安全：攻防实践与体系构建》资料仓库

fingernft

FingerNFT是一款开源NFT市场，兼容Opensea、Rarible。

SpringBootVulExploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

linuxStack

Linux技术栈

Elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

tail

Go package for reading from continously updated files (tail -f)

go-ethereum-code-analysis

Medusa

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

fabric-course

support

Pico Technical Support