一个 CTF 知识库。A knowledge base for CTF (Capture The Flag) challenges.

一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

一个 CVE 漏洞预警知识库，无 exp/poc，部分包含修复方案。A knowledge base of CVE security vulnerability, no PoCs/exploits.

一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.

一个网络安全相关法律法规、安全政策、国家标准、行业标准知识库。A knowledge base of cybersecurity policies, laws, guidelines, and technical standards.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

根据hanc00l和m0l1ce提供的数据构建docker版的乌云漏洞库，包含8.8W漏洞信息

收集、整理、修改互联网上公开的漏洞POC

EZ-Work AI文档翻译，人人可用的开源AI文档翻译助手，可以快速低成本调用OpenAI等大语言模型api，帮助您实现txt/markdown/word/csv/excel/pdf/ppt的文档翻译。

《红队vs.蓝队：网络攻防实战技术解析》资料仓库

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

Burpsuite-Plugins-Usage

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

FTP,SSH,MYSQL,MSSQL等弱口令爆破工具！

这是一款在发生应急响应事件时可以快速对Windows和Linux系统的证据链进行收集的工具

Blog

Alternative Shellcode Execution Via Callbacks

Hook, DLLInject, PE_Tool

云课堂《X86/X64软件逆向分析入门》示例代码

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具、键盘记录器

面向网络安全从业者的知识文库🍃 (停止更新)

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

roop extension for StableDiffusion web-ui

Linux enumeration tool for pentesting and CTFs with verbosity levels

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Malicious traffic detection system

Gin is a high-performance HTTP web framework written in Go. It provides a Martini-like API but with significantly better performance—up to 40 times faster—thanks to httprouter. Gin is designed for …