0x0FB0

Belati

The Traditional Swiss Army Knife for OSINT

CTF-pwn-tips

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

d3-celestial

A star map with d3.js

leaky-repo

Benchmarking repo for secrets scanning

websocat

Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions

django-vue-template

Django Rest + Vue JS Template

pentest-tools

A collection of custom security tools for quick needs.

jwt-pwn

Security Testing Scripts for JWT

serianalyzer

A static byte code analyzer for Java deserialization gadget research

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

chronicles-of-dude

Bypassing-Web-Application-Firewalls

angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

BurpSuiteHTTPSmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

splunk_whisperer

Whitepapers

A collection of publicly released whitepapers

awesome-free-software

Curated list of free as in freedom software

WaveEdit

Synthesis Technology WaveEdit for the E370 and E352 Eurorack synthesizer modules

Cobra

Source Code Security Audit (源代码安全审计)

Rack

The virtual Eurorack studio

gr-nordic

GNU Radio module and Wireshark dissector for the Nordic Semiconductor nRF24L Enhanced Shockburst protocol.

exploits

Miscellaneous exploit code

java-properties-to-json

Simple java framework for conversion java properties to JSON object.