Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

venom - C2 shellcode generator/compiler/handler

Metasploit Framework

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

Find web directories without bruteforce

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

PEDA - Python Exploit Development Assistance for GDB

tinyhttpd的详细注释版，十分适合入门者学习的一个项目

CTF framework and exploit development library

unified io lib for pwning development written in python

A collection of darkc0de old scripts (for education purposes only)

《Black.Hat.Go》中文翻译

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

Powerful framework for rogue access point attack.

Fast HTTP enumerator

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

碎遮SZhe_Scan Web漏洞扫描器，基于python Flask框架，对输入的域名/IP进行全面的信息搜集，漏洞扫描，可自主添加POC

SSRF (Server Side Request Forgery) testing resources

A memory leak detection library for Android.

Real-time HTTP Intrusion Detection

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Struts2全漏洞扫描利用工具

A fast DOM based XSS vulnerability scanner with simplicity.

DOM XSS scanner for Single Page Applications

Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)

A collection of custom security tools for quick needs.

BBT - Bug Bounty Tools (examples💡)

a recon tool that allows searching on URLs that are exposed via shortener services