Copperfie1d

AndroidChecklist

Android应用审计checklist整理

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

blog-pictures

CORScanner

🍻 Fast CORS misconfiguration vulnerabilities scanner

CTF-Training

收集各大比赛的题目和Writeup

CVE-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

django-blog

drizzleDumper

drizzleDumper是一款基于内存搜索的Android脱壳工具。

Hatch

Hatch is a brute force tool that is used to brute force most websites

jsproxy

一个基于浏览器端 JS 实现的在线代理

LaZagne

Credentials recovery project

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

Micro8

One-Day

the First

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

PEST

this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try

python

Python获取Linux基础信息

reCAPTCHA

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload

Sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

simple_http_server

simple http server for upload and download

Struts2-Scan

Struts2全漏洞扫描利用工具

svnExploit

SvnExploit支持SVN源代码泄露全版本Dump源码

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)

thinkphp-RCE-POC-Collection

thinkphp v5.x 远程代码执行漏洞-POC集合

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Writeups

国内各大CTF赛题及writeup整理