Awesome XSS stuff

旨在通过分析企业信息安全建设过程中的心路历程 #从技术、管理、治理等多个层面了解企业信息安全建设的不同阶段

收集或编写各种漏洞PoC、ExP

Audio file steganography. Hides files or text inside audio files and retrieve them automatically

Security technique research and some funny work on it !

甲方企业安全建设

github泄露扫描系统

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming la…

ModSecurity v3 Nginx Connector

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.

Steganography brute-force utility to uncover hidden data inside files

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

A guide to smart contract security best practices

this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try

Some setup scripts for security research tools.

AUDIT Plugin for MySQL. See wiki and readme for description. If you find the plugin useful, please star us on GitHub. We love stars and it's a great way to show your feedback.

unix-like reverse engineering framework and commandline tools security

A little tool to play with Windows security

SQL审核平台，支持SQL审核、SQL优化(SQLAdvisor|SOAR|SQLTuning)、脱敏查询、慢日志管理、数据库审核、表结构同步、会话管理、RDS管理

This tool is for sensitive information searching on Github - All new Version.

JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的下一代web应用防火墙

OSSEC Documentation

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

A Pwn2Own exploit chain

VirtualBox E1000 Guest-to-Host Escape

蓝鲸智云配置平台(blueking cmdb)