GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Real - time non-invasive AOP framework container based on JVM

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

OneForAll是一款功能强大的子域收集工具

Dump classes from running JVM process.

宝塔Linux面板 - 简单好用的服务器运维面板

CodiMD - Realtime collaborative markdown notes on all platforms.

Trying to tame the three-headed dog.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

A PHP7 extension that can hook most functions/classes and parts of opcodes

Metasploit Framework

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Repo for random stuff

Advanced vulnerability scanning with Nmap NSE

ICO Source Spider, write in NodeJS

The goal of this repository is to document the most common techniques to bypass AppLocker.

CVE-2017-11882 Exploit accepts 109 bytes long command in maximum.

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

Java RMI enumeration and attack tool.

Web-Security-Learning

A collection of pentest and development tips

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A tool to dump Java serialization streams in a more human readable form.