我的开发经验+提示词库=vibecoding工作站；My development experience + prompt dictionary = Vibecoding workstation；ניסיון הפיתוח שלי + מילון פרומפטים = תחנת עבודה Vibecoding；私の開発経験 + プロンプト辞書 = Vibecoding ワークステーション；나…

Advanced SQL Injection Techniques for Bug Bounty Hunters

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities

Exploitation toolkit for RichFaces

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

主流供应商的一些攻击性漏洞汇总

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

A small list of projects for students of programming for cybersecurity

Collection of cracked malware, and ebooks

Linux kernel source tree

StandIn is a small .NET35/45 AD post-exploitation toolkit

A malicious LDAP server for JNDI injection attacks

Tools, utilities and scripts to help you write redis modules!

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

forked from frohoff/ysoserial and added my own payloads.

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

HTTP file upload scanner for Burp Proxy

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.

Roadmap to becoming a web developer in 2018 (Web开发者学习路线图 2018.01.06版)

POC for CVE-2018-15685

译文：Puppeteer 与 Chrome Headless —— 从入门到爬虫

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

python/golang -web入坑指南

A face detection library in 200 lines of JavaScript