[已归档] Nebula 1.x 文档(gitbook 版)—— 内容对应已停止维护的 1.x。新版本文档见 threathunterX/nebula2

🌱 Web based ssh client

PHP Webshell with handy features

Privilege Escalation Enumeration Script for Windows

❤❤❤ 有人鞭策，就有努力

Load shellcode into a new process

👻Behold3r -- 收集指定网站的子域名，并可监控指定网站的子域名更新情况，发送变更报告至指定邮箱

Payload Generation Framework

Veil 3.1.X (Check version info in Veil at runtime)

🎶 一款用 Java 实现的现代化社区（论坛/问答/BBS/社交网络/博客）系统平台。A modern community (forum/Q&A/BBS/SNS/blog) system platform implemented in Java. https://ld246.com

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

A collection of open source and commercial tools that aid in red team operations.

WarBerryPi - Tactical Exploitation

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Win32k LPE vulnerability used in APT attack

Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

Flashscan is a pocscanner of Websites.

ATTCK-PenTester-Book

绕过专业工具检测的Webshell研究文章和免杀的Webshell

XPay个人免签收款支付系统 完全免费 资金直接到达本人账号 支持 支付宝 微信 QQ 云闪付 无需备案 无需签约 无需挂机监控APP 无需插件 无需第三方支付SDK 无需营业执照身份证 只需收款码 搞定支付流程 现已支持移动端支付

A list of web application security

Web-Security-Learning

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

移动安全知识库

A Whirlwind Tour of Python (Chinese Translation)

One has no future if one couldn't teach themself.

Modern JavaScript Tutorial