j3seer

prefect

Prefect is a workflow orchestration framework for building resilient data pipelines in Python.

vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

ctfpwn-env

Script to setup pwn environment for CTF with Docker

pker

Automatically converts Python source code to Pickle opcode

crc32-file-collision-generator

Create files whose CRC32 value matches that of another file

C_Win32ReverseShell

SharpShooter

Payload Generation Framework

Powershell-Scripts-for-Hackers-and-Pentesters

An List of my own Powershell scripts, commands and Blogs for windows Red Teaming.

DLLSideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

pickleassem

A simple pickle assembler to make handcrafting pickle bytecode easier.

Commodity-Injection-Signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

ctfwriteups.org

Code for ctfwriteups.org

ctfd-discord-webhook-plugin

Discord webhook plugin for CTFd

UIUCTF-2023-Public

Challenge source code, official writeups, and infrastructure setup for UIUCTF 2023

UIUCTF-2022-Public

Challenge source code and deployment scripts for UIUCTF 2022

virtualbox-snapshotter

Python script to automatize the Virtualbox snapshot process

CVE-2023-38646

Metabase Pre-auth RCE (CVE-2023-38646)

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

OPSEC-Tradecraft

Collection of OPSEC Tradecraft and TTPs for Red Team Operations

Tartarus-TpAllocInject

Evilize

Triaging Windows event logs based on SANS Poster

cve

Gather and update all available and newest CVEs with their PoC.

typst

A new markup-based typesetting system that is powerful and easy to learn.

smart-contract-vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods

GPOddity

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

Eruditus

Discord CTF helper bot

CTF

关于我在CTF中的所有东西

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..