Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

a rep for documenting my study, may be from 0 to 0.1

Cyber Security ALL-IN-ONE Platform

国密标准文档~搬运工，提供所有国密标准文档及其下载信息，可在脚本中启用下载功能，按需使用。

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP

DNSLOG平台 golang 一键启动版

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

Elasticsearch 可视化DashBoard, 支持Es监控、实时搜索，Index template快捷替换修改，索引列表信息查看， SQL converts to DSL等

哔咔漫画, PicACG comic PC client(Windows, Linux, Mac)

Book PDF

代码审计总结

python

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-ex…

监控github上新增的cve编号项目漏洞，推送钉钉或者server酱

Yapi RCE漏洞批量验证与伪交互SHELL

鹿不在侧，鲸不予游🐋

我的burp插件集

bin4xin's big files repo.upload by git lfs

2021hvv漏洞汇总

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

This project is used to collect the EXP/POC disclosed on the Internet and provide project support for Heptagram security team.

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

源代码漏洞の审计

一款基于BurpSuite的被动式shiro检测插件

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

cms漏洞插件搜集(一起来搜集)

🦕 常用正则大全, 支持web / vscode / idea / Alfred Workflow多平台

xray社区高级版证书生成，仅供学习研究，正常使用请支持正版

DIVA Android - Damn Insecure and vulnerable App for Android