A tool for embedding XXE/XML exploits into different filetypes

🎯 XML External Entity (XXE) Injection Payload List

一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

This is a webshell open source project

CaptfEncoder是一款可扩展跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、非对称加密、特殊编码、杂项等工具，并聚合各类在线工具。

Mac微信功能拓展/微信插件/微信小助手(A plugin for Mac WeChat)

Open-Source Remote Administration Tool For Windows C# (RAT)

源代码漏洞の审计

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

(discontinued) Your all-purpose markdown editor.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

OWASP Joomla Vulnerability Scanner Project

An unidentifiable mechanism that helps you bypass GFW.

v2ray ws tls 1.3 web nginx 搭建脚本

OneForAll是一款功能强大的子域收集工具

Lean's OpenWrt source

V2Ray Nginx+vmess+ws+tls/ http2 over tls 一键安装脚本

V2rayU,基于v2ray核心的mac版客户端,用于科学上网,使用swift编写,支持vmess,shadowsocks,socks5等服务协议,支持订阅, 支持二维码,剪贴板导入,手动配置,二维码分享等

一键v2ray ws + tls 方便就完事了

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Eth…

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.