im23pds

2018-BlackHat-Tools-List. 2018 BlackHat Tools List

BlockChain-Security-List. BlockChain-Security-List

Issue-198327. A Webkit RCE exploit and an SBX bug

Powershell-Attack-Guide. Powershell攻击指南----黑客后渗透之道

poc-2. PowerShell

CVE-2018-3191. CVE-2018-3191 反弹shell

Powerful-Plugins. Powerful plugins and add-ons for hackers

sploits. C++

Modlishka-Phishing-NG. Modlishka. Reverse Proxy. 2FA authentication Phishing NG.

Prowl. Python

Redmine-CVE-2019-18890. CVE-2019-18890 POC (Proof of Concept)

gitleaks-git-repos-for-secrets. Audit git repos for secrets 🔑

svnExploit. SvnExploit支持SVN源代码泄露全版本Dump源码

takeover. Shell

virtualbox_e1000_0day. VirtualBox E1000 Guest-to-Host Escape

Awesome-Fuzzing. A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

CVE-2020-17382. PoC exploits for CVE-2020-17382

Can-my-iPhone-crash. A iOS 12 and 11 webkit exploit

Windows-10-Exploit. Windows 10 Exploit

Awesome-Hacking-Resources. A collection of hacking / penetration testing resources to make you better!

awesome-browser-exploit. awesome list of browser exploitation tutorials

android_app_security_checklist. Android App Security Checklist

CORScanner. 🍻 Fast CORS misconfiguration vulnerabilities scanner

iOSREBook. 《iOS应用逆向与安全》随书源码

CVE-2018-7601-Exploit-for-Drupal-7. Exploit for Drupal 7 <= 7.57 CVE-2018-7600

solidity-security-blog. Comprehensive list of known attack vectors and common anti-patterns

BHR_Labs. Black Hat Ruby book | all labs files

naabu. A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

onekeyhq.github.io. onekeyhq.github.io

medusa_combo_files. Combinations of default usernames and passwords for the Medusa password cracker

nosqli-sql. NoSql Injection CLI tool

CVE-Reverse. Python

Fully-Undetectable-Techniques. C

HackBrowserData. Decrypt passwords/cookies/history/bookmarks from the browser. 一款支持全平台的浏览器数据（Passwords | History | Bookmarks | Cookies）导出工具

bombus. 合规审计平台

Middleware-Vulnerability-detection. CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

jfrog-npm-tools. Python

OktaPostExToolkit. Python

fscan-Intranet. Go

Ladon-for-CobaltStrike. Ladon for Cobalt Strike, Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp

fhe-toolkit-linux. IBM Fully Homomorphic Encryption Toolkit For Linux. This toolkit is a Linux based Docker container that demonstrates computing on encrypted data without decrypting it! The toolkit ships with two demos including a fully encrypted Machine Learning inference with a Neural Network and a Privacy-Preserving key-value search.

unauthorized-check. 扫描常见未授权访问(改)（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）

Dictionary-Of-Pentesting. Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Miscellaneous. 百宝箱

cotopaxi. Set of tools for security testing of Internet of Things devices using specific network IoT protocols

IntelOwl. Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Dirscan. 🎃 目录扫描工具 Dirscan

JNDI-Exploit-Bypass-Demo. Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>

FRIDA-DEXDump. Fast search and dump dex on memory.

owasp-mstg. The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

linbingVulScanner. 本系统是对目标进行漏洞扫描的一个系统,前端采用vue技术,后端采用flask.核心原理是扫描主机的开放端口情况,然后根据端口情况逐个去进行poc检测,poc有110多个,包含绝大部分的中间件漏洞,本系统的poc皆来源于网络或在此基础上进行修改,在centons7环境下使用nginx和uwsgi部署,部署起来可能有点麻烦,烦请多点耐心