一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率

Code examples that accompany various MDN DOM and Web API documentation pages

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

A basic proxylogon scanner

Http request smuggling vulnerability scanner

essential templates for kenzer

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

JSshell - JavaScript reverse/remote shell

Apache Solr Exploits 🌟

HackerOne "in scope" domains

Weblogic IIOP CVE-2020-2551

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts

The cheat sheet about Java Deserialization vulnerabilities

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Online Subdomain Detect Script

Funny project to create an encoder/obfuscator that converts any javascript code into a code that only consist of /[a-z().]/ characters

Pwn stuff.

A collection of browser-based side channel attack vectors.

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

with metasploit

Project Wycheproof tests crypto libraries against known attacks.