tinmin's starred repositories
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
PHP-Parser
A PHP parser written in PHP
lifeRestart
やり直すんだ。そして、次はうまくやる。
hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
CrackMapExec
A swiss army knife for pentesting networks
AzurLaneAutoScript
Azur Lane bot (CN/EN/JP/TW) 碧蓝航线脚本 | 无缝委托科研,全自动大世界
WechatMomentScreenshot
朋友圈转发截图生成工具(⚠️Fork 不是收藏,请勿在贡献代码以外的情况下 Fork!)
collisions
Hash collisions and exploitations
log4j-shell-poc
A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
CVE-2021-40444
CVE-2021-40444 PoC
go-mitmproxy
mitmproxy implemented with golang. 用 Golang 实现的中间人攻击(Man-in-the-middle),解析、监测、篡改 HTTP/HTTPS 流量。
rogue_mysql_server
A rouge mysql server supports reading files from most mysql libraries of multiple programming languages.
h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
pentest_tools
收集一些小型实用的工具
AutoBypass403-BurpSuite
一个自动化bypass 403/auth的Burpsuite插件
waimai-cps-uniapp
1.领取美团和饿了么红包 2.分销功能,用户推荐给其他人,还能拿到下级的返利 3.公众号推送,每天提醒用户点餐 4.返利提现,订单的返利,用户可以直接提现到微信钱包 5.推广海报生成,用户可以生成自己的专属海报,实现分销,赚取佣金
ctf_writeups
CTFの解法をまとめる。
starctf2022
Official source code and writeups of *CTF2022
go-concurrency-programming
go 语言并发编程指南
pentest_tools
收集一些小型实用的工具
Django-SQL-Inject-Env
Django SQL Injection Vulnerability Environment.