渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve…

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Dirty COW

《FRIDA操作手册》by @hluwa @r0ysue

Thinking In PHP Internals, An open book on PHP Internals

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

Golang-Gin 框架写的免杀平台，内置分离、捆绑等多种BypassAV方式。

Explore Flask中文翻译。关于flask的一些最佳实践。

A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development…

Collate and collect binary related materials, including papers, tools, etc. Now,there are the following categories: 1、Fuzzing