Deep Learning model to analyze a large corpus of clear text passwords.

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

Simple DNS Rebinding Service

各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新

Automated NoSQL database enumeration and web application exploitation tool.

Droidefense: Advance Android Malware Analysis Framework

massive SQL injection vulnerability scanner

Automated script to search in SMB protocol for availables pipe names

List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built into the Techinical Specific Document, or will be checked in t…

12,805 Free Yara rules created by

Automated Pentest Recon Scanner

Proof-of-Concept exploits for CVE-2017-11882

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Chrome < 62 uxss exploit (CVE-2017-5124)

A full-fledged msfrpc library for Metasploit framework.

Python Remote Administration Tool (RAT) to gain meterpreter session

A tool help get the basic information of one site

SMB null session identification and enumeration tool

A set of exploitation/reversing aids for IDA

CVE-2017-5721 Proof-of-Concept

Contains PoC scripts demonstrating the BlueBorne vulnerabilities

CyberScan

poc or exp of android vulnerability

A .DS_Store file disclosure exploit. It parse .DS_Store file and download files recursively.

Safari 10 exploit (CVE-2017-7089)

Proof-of-concept codes created as part of security research done by Google Security Team.

A simple CORS misconfiguration scanner