nielsing

fucking-algorithm

刷算法全靠套路，认准 labuladong 就够了！English version supported! Crack LeetCode, not only how, but also why.

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

project-layout

Standard Go Project Layout

Learn-Vim

Learning Vim and Vimscript doesn't have to be hard. This is the guide that you're looking for 📖

min-sized-rust

🦀 How to minimize Rust binary size 📦

Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

WhatWaf

Detect and bypass web application firewalls and protection systems

web3

Making sense of web3 & crypto. Introduction to key concepts and ideas. Rigorous, constructive analysis of key claims pro and con. A look at the deeper hopes and aspirations.

libc-database

Build a database of libc offsets to simplify exploitation

Hack-Night

Hack Night is an open weekly training session run by the OSIRIS lab.

Awesome-Vulnerability-Research

🦄 A curated list of the awesome resources about the Vulnerability Research

certigo

A utility to examine and validate certificates in a variety of formats

TLS-poison

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

bosch_headunit_root

Documentation and code for rooting and extending a Bosch car head unit (lcn2kai)

rust-windows-shellcode

Windows shellcode development in Rust

web-methodology

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

bb-reports-templates

My small collection of reports templates

transformations

CVE-2020-15778

s3_objects_check

Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.

mod_plaintext.py

AKA "Internet Chemotherapy"

unicode-pentester-cheatsheet

An easy to navigate list of unicode characters that have risky transformations 💥

smokesignal

A simple smoke testing library for Golang. You can use Smokesignal to run build verification tests on your APIs.

z-i

:chart_with_upwards_trend: Web sites banned in Ru卐卐ia (сайты, запрещённые в Пидорашке)