a rep for documenting my study, may be from 0 to 0.1

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

locally hosted web application that allows you to perform various operations on PDF files

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Various tips & tricks

内网集权系统渗透测试笔记

收集的文章 https://mrwq.github.io/vulnerability-paper/

📚 A collection of useful resources for building RESTful HTTP+JSON APIs.

企业安全建设

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

钓鱼攻击资源汇总&备忘录

安全行业从业者自研开源扫描器合辑

web3百科全书

信息安全方面的书籍书籍

🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe、disable ssl pinning

Android APP漏洞之战系列，主要讲述如何快速挖掘APP漏洞

本项目制作的初衷是帮助渗透新手快速搭建工作环境，工欲善其事，必先利其器。

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Java Security ☞ Vulnerability Research

A list for Spring Security

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Java web common vulnerabilities and security code which is base on springboot and spring security

红队笔记

Fastjson姿势技巧集合

Six Degrees of Domain Admin