SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XSS scanners as well.

dirbuster-ng is C CLI implementation of the Java dirbuster tool

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

A Go implementation of dirsearch.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

配合reGeorg使用的内网扫描工具

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

A tool to create a JScript file which loads a .NET v2 assembly from memory.

Meterpreter Scripts that I'm working on

Unified repository for different Metasploit Framework payloads

THIS REPO IS OBSOLETE. USE https://github.com/rapid7/metasploit-payloads INSTEAD

MSFvenom Payload Creator (MSFPC)

Yara rules

用于扫描git，svn泄露

收集各种各样的exp

This is a backdoor about discover network device ,and it can hidden reverse connecting the hacker's server with encrypt commuication 后门扫描器,适合在已经攻陷的内网中做下一步的网络信息扫描..

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

check cmd execute

各种漏洞poc、Exp的收集或编写

drops.wooyun.org 乌云Drops文章备份

Curated list of public penetration testing reports released by several consulting firms

Webshell

内网渗透脚本

黑客相关的电视剧/电影/纪录片

office-exploits Office漏洞集合 https://www.sec-wiki.com

CTF 题目列表

linux-kernel-exploits Linux平台提权漏洞集合