wireghoul

graudit

grep rough audit - source code auditing tool

htshells

Self contained htaccess shells and attacks

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

doona

Network based protocol fuzzer

sploit-dev

Exploits and research stuffs

php-omelette

Code fragmentation technique for scripting languages

presentations

Slides and demo code for past presentations

traversty

Directory traversal tool

php_bugs

PHP代码审计分段讲解

safelity

Secure programming library for PHP

heap-exploitation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

Book_Generation_Z_Developer

Book to hold the content files for the 'Generation Z Developer'

coccinelle

Source code of the Coccinelle project (mirror of the main Coccinelle repository located at Inria)

Infosec_Reference

An Information Security Reference That Doesn't Suck

nikto

Nikto web server scanner

php-malware-finder

semgrep

Fast and syntax-aware semantic code pattern search for many languages: like grep but for code

semgrep-rules

semgrep rules registry

Unoriginal-Rice-Patty

"Unoriginal-Rice-Patty" is my personal title for the Replay-based attack on Honda and Acura vehicles

wifi_ducky

Upload, save and run keystroke injection payloads with an ESP8266 + ATMEGA32U4

CVSS-Calculator

Windows desktop CVSS calculator for easier report writing

Empire

Empire is a PowerShell and Python post-exploitation agent.

Exploitation

jlox

Implementation of the lox programing language in java

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

mysql

Go MySQL Driver is a MySQL driver for Go's (golang) database/sql package

PHP-Parser

A PHP parser written in PHP

pwnagotchi

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFI pwning.

snallygaster

Tool to scan for secret files on HTTP servers

vscode-weaudit

Create code bookmarks and code highlights with a click.