【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

Attack Surface Management Platform | Sn1perSecurity LLC

CVE-2021-4034 1day

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

Pre-Built Vulnerable Environments Based on Docker-Compose

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/…

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

POC&EXP仓库、hvv弹药库、Nday、1day

2021 hw

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.…

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

OneForAll是一款功能强大的子域收集工具

This tool is for sensitive information searching on Github - The Fast Version here: https://github.com/Hell0W0rld0/Github_Hunter_By_Golang

记录代码审计学习的过程，附含源码

2020年漏洞复现大全

「画像処理100本ノック」中文版本！为图像处理初学者设计的 100 个问题。

红队作战中比较常遇到的一些重点系统漏洞整理。

pytorch implementation for "Deep Flow-Guided Video Inpainting"(CVPR'19)

The most comprehensive database of Chinese poetry 🧶最全中华古诗词数据库, 唐宋两朝近一万四千古诗人, 接近5.5万首唐诗加26万宋诗. 两宋时期1564位词人，21050首词。 阿里招 Python P6/P7 上海张江, gaojunqi@outlook.com

A fast sub domain brute tool for pentesters

白阁文库内测版

一个好玩的Web安全-漏洞测试平台

基于狼组安全服务(社区)平台API打造的一款在线信息收集程序

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

Java web common vulnerabilities and security code which is base on springboot and spring security