Oliver's repositories
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
CMS-Hunter
CMS漏洞测试用例集合
collectmessage
围绕企业进行渗透测试的前期信息采集工具
CTFTools
Personal CTF Toolkit
CVE-2018-8120
CVE-2018-8120 Windows LPE exploit
dictBuilder
渗透测试中字典生成工具
domain_hunter_pro
domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
DoraBox
DoraBox,多拉盒 - 掌握常见漏洞攻防，快速提升渗透能力
eos
An open source smart contract platform
eyes.sh
Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.
Fiora
Fiora：漏洞PoC框架的图形版，快捷搜索PoC、一键运行Nuclei
firmwalker
Script for searching the extracted firmware file system for goodies!
freddy
Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
IoTGoat
IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.
Linux_kernel_exploits
I will publish some Linux kernel exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.
manticore
Symbolic execution tool
Micro8
Gitbook
mythril
Security analysis tool for Ethereum smart contracts
OneForAll
OneForAll是一款功能强大的子域收集工具
papers
SlowMist Vulnerability Research Advisories
pocsploit
a lightweight, flexible and novel open source poc verification framework
SecIoT-Web
IoT漏洞检测平台，支持固件第三方库版本分析。移动安全相关功能移至SecMobile。
SecToolSet
The security tool(project) Set from github。github安全项目工具集合
shadowsocks-android
A shadowsocks client for Android
SpringBootVul
预备增加关于Spring的相关漏洞环境。依赖https://github.com/LandGrey/SpringBootVulExploit
subfinder
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
upload-labs
一个帮你总结所有类型的上传漏洞的靶场
xcdn
尝试找出cdn背后的真实ip
yunwei
运维脚本工具库，收集各类运维常用工具脚本，实现快速检查基线等