bendawang

plc_memo

一个关于PLC的备忘录，记录一下挖过漏洞的PLC的一些基本信息

glibc_ptmalloc_learning

php-fpm-code-analysis

php-fpm源码分析

34c3ctf

Challenge Sources & Exploits for the 34C3 CTF

61D-Rank

Based on phith0n's mooder project , and I change the authentication to oauth2

attacktrees

JavaFX tool for Attack Tree generation and evaluation for CPS systems

awvs_190703137

Docker Awvs

bcrypto

useful crypto functions in ctf

bendawang

Bypass_Disable_functions_Shell

一个各种方式突破Disable_functions达到命令执行的shell

ChatGPT-On-WeChat

drupalgeddon2

go-common

哔哩哔哩 bilibili 网站后台工程 源码

ICS-pcap

A collection of ICS/SCADA PCAPs

IoT-security-papers

research and survey papers related to IoT security from 2014 to the first half of 2019

iot-security-wiki

IOT security wiki

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

php7-opcache-override

Security-related PHP7 OPcache abuse tools and demo

python_hook

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

qnap-utils

Utilities to unpack QNAP firmware images and QPKG files

Redpoint

Digital Bond's ICS Enumeration Tools

slides

The slides I have ever presented

spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

TRISIS-TRITON-HATMAN

Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware

upload-labs-writeup

upload-labs 上传漏洞靶场的解题方法

vpp

werkzeug

The comprehensive WSGI web application library.

x-crack

x-crack - Weak password scanner, Support: FTP/SSH/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB