rrrrrrce's starred repositories
rfc7540-translation-zh_cn
RFC 7540 - HTTP/2 中文翻译版
bug-bounty-reference
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
hackerone-reports
Top disclosed reports from HackerOne
My-Presentation-Slides
Collections of Orange Tsai's public presentation slides.
ActiveMQ-RCE
ActiveMQ RCE (CVE-2023-46604) 漏洞利用工具
Fuzzing101
An step by step fuzzing tutorial. A GitHub Security Lab initiative
BugBountyBooks
A collection of PDF/books about the modern web application security and bug bounty.
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Browser-pwn
Include CVE vulnerability analyze, ctf pwn and documents for Browser-pwn
js-challenger
Solution to all JSchallenger challenges
Taie-Bugbounty-killer
挖掘国内外漏洞平台必备的自动化捡钱赏金技巧,看了并去做了捡钱如喝水。
gh-workflow-auditor
Script to audit GitHub Action Workflow files for potential vulnerabilities.
AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。
dirsearch_bypass403
目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别
Frida-Labs
The repo contains a series of challenges for learning Frida for Android Exploitation.
404StarLink
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
SpringBoot-Scan
针对SpringBoot的开源渗透框架,以及Spring相关高危漏洞利用工具
dictionaries
Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks