Ma3k4H3d

GithubHack

Collect some repository about github hack

2020-QWB-PWN

PWN & Reverse

Top-Cyber-Security-Conference

top cyber security conferences

2021_Hvv

2021 hw

AEG

the auto heap exploit analysis based on Angr

ArcHeap

ArcHeap: Automatic Techniques to Systematically Discover New Heap Exploitation Primitives

articles

Article Publish in Wechat & Toutiao

bfe

Open-source layer 7 load balancer derived from proprietary Baidu FrontEnd

BinaryDatabase

Collate and collect binary related materials, including papers, tools, etc. Now,there are the following categories: 1、Fuzzing

BullshitGenerator

Needs to generate some texts to test if my GUI rendering codes good or not. so I made this.

CVE-2020-17144

weaponized tool for CVE-2020-17144

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

Exploits-1

Windows Exploits

iot

janus

Janus: a state-of-the-art file system fuzzer on Linux

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

Middleware-Vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

Nmap-Xmind

Nmap思维导图

pocs

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwndocker

A docker environment for pwn in ctf

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

Routers-vuls

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

SysmonTools

Utilities for Sysmon

System-Vulnerability

系统漏洞合集 Since 2019-10-16

traitor

:arrow_up: :skull_and_crossbones: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

unicorefuzz

Fuzzing the Kernel Using Unicornafl and AFL++