nielsing

web3

Making sense of web3 & crypto. Introduction to key concepts and ideas. Rigorous, constructive analysis of key claims pro and con. A look at the deeper hopes and aspirations.

smokesignal

A simple smoke testing library for Golang. You can use Smokesignal to run build verification tests on your APIs.

min-sized-rust

🦀 How to minimize Rust binary size 📦

rust-windows-shellcode

Windows shellcode development in Rust

bosch_headunit_root

Documentation and code for rooting and extending a Bosch car head unit (lcn2kai)

WhatWaf

Detect and bypass web application firewalls and protection systems

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

s3_objects_check

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

unicode-pentester-cheatsheet

An easy to navigate list of unicode characters that have risky transformations 💥

mod_plaintext.py

AKA "Internet Chemotherapy"

z-i

:chart_with_upwards_trend: Web sites banned in Ru卐卐ia (сайты, запрещённые в Пидорашке)

web-methodology

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

libc-database

Build a database of libc offsets to simplify exploitation

Hack-Night

Hack Night is an open weekly training session run by the OSIRIS lab.

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

Learn-Vim

Learning Vim and Vimscript doesn't have to be hard. This is the guide that you're looking for 📖

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

TLS-poison

Awesome-Vulnerability-Research

🦄 A curated list of the awesome resources about the Vulnerability Research

fucking-algorithm

刷算法全靠套路，认准 labuladong 就够了！English version supported! Crack LeetCode, not only how, but also why.

CVE-2020-15778

Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

certigo

A utility to examine and validate certificates in a variety of formats

project-layout

Standard Go Project Layout

transformations

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.