SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

ShowDoc is a tool greatly applicable for an IT team to share documents online一个非常适合IT团队的在线API文档、技术文档工具

Damn Vulnerable Web Application (DVWA)

SQLI labs to test error based, Blind boolean based, Time based.

🚀A multiple proxy protocol manage panel application interface

A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.

一个好玩的Web安全-漏洞测试平台

一个想帮你总结所有类型的上传漏洞的靶场

A WordPress theme that is built with AI-assisted reading features, colorful, user-friendly, well-rounded, and rich in functionalities. Support Chinese, English, Japanese, Français (soutien de base)…

A Wonderful WordPress Theme: 樱花庄的白猫博客主题

【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

码小六 - GitHub 代码泄露监控系统

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

SniperPhish - The Web-Email Spear Phishing Toolkit

适用于一线安服的ctf培训题目，全docker环境一键启动

PHP Secure Headers

WordPress单栏主题，支持全局PJAX，自适应手机端

The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

🎉Wordpress二次元简约个人博客主题by江程训

xss 跨站漏洞平台

Hackergame 2022 的官方与非官方题解

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

A webshell that can bypass some system security, all code has been obfuscated to bypass malware scans freely.

Welcome to the Evolution CMS. The world’s fastest, most customizable Open Source PHP CMS. Your creative vision, no restrictions, no compromise.

Whitebox source code review cheatsheet (Based on AWAE syllabus)

Gel4y-Mini-Shell-Backdoor-Decode