@tkmru

awesome-edr-bypass. Awesome EDR Bypass Resources For Ethical Hacking

nao. Simple No-meaning Assembly Omitter for IDA Pro (This is just a prototype)

awesome-linux-rootkits. a summary of linux rootkits published on GitHub

linux-insides-ja. Japanese version of linux-insides book

lazyCSRF. A more useful CSRF PoC generator on Burp Suite

idapm. idapm is IDA Plugin Manager via GitHub Repository.

pwn_collection. CTF & practice exploit collection

mln. A modern replacement for ‘ln’. It is inspired by exa.

nginx-alias-traversal-sample. Nginx alias traversal vulnerable environments for study

biwx. binary editor

seccamp2021-b5. Python

xss_dict. xss dictionary for Google 日本語入力

dotfiles. My development environment on OSX and Ubuntu using Mitamae

maruko. malware crawler inspired by 'ちびまる子ちゃん'

cibo. x86 emulator written in Go. (CURRENTLY UNDER DEVELOPMENT)

im2pdf. Tool to convert images to pdf and unite them.

my-frida-snippets. Python

nginx-ssrf-sample. Nginx SSRF vulnerable environments for study

nginx-http-splitting-sample. Nginx HTTP response splitting vulnerable environments for study

anti-debugging-poc. anti-debugging PoC

hacktricks. Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

pwn_server. pwn server for practice

dotfiles-windows. dotfiles for windows

BurpSuiteExtensionTemplate. Template codes for burp extension developers

idapython-scripts. IDAPro scripts

client-side-template-injection-sample. Client-Side Template Injection Sample App with AngularJS

weatherhacks. This python code extracts Weather forecast in Japan from Weather Hacks. Weather Hacks is web service that distribute Weather forecast json data. URL:http://weather.livedoor.com/weather_hacks/webservice

no_libc. C program without libc.

pwnkiller. pwn tool inspired by 'painkiller' https://www.youtube.com/watch?v=nM__lPTWThU

twint. An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

Sublist3r. Fast subdomains enumeration tool for penetration testers

security. C++

vuln-notes. A note of my favorite vulnerability.

goran. simple http server.

seccamp2023-c4. Dockerfile