A tool to elevate privilege with Windows Tokens

windows-kernel-exploits Windows平台提权漏洞集合

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

Another Windows Local Privilege Escalation from Service Account to System

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A script that you can run in the background!

Elegant theme for Jekyll.

A collection of hacking / penetration testing resources to make you better!

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more c…

A big list of Android Hackerone disclosed reports and other resources.

XSS Cheatsheet - A collection of XSS attack vectors https://xss.devwerks.net/

A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Awesome Writeups and POCs

Writeups for HacktheBox 'boot2root' machines

A list of public penetration test reports published by several consulting firms and academic security groups.

A list of interesting payloads, tips and tricks for bug bounty hunters.

A collection of the solutions people wrote for the H1-212 Capture The Flag event