A Catalog of Application Whitelisting Bypass Techniques
Repositories
rootclay repositories
Audit of personal smart contracts
A collection of various awesome lists for hackers, pentesters and security researchers
Awesome XSS stuff
Six Degrees of Domain Admin
CVE-2017-1000117
自己收集的一些EXP-POC
一款基于各大企业信息API的工具,解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。
基于docker的elk,曾应用于HCTF2016做日志可视化分析
:octocat:HelloGitHub —— 分享、推荐 GitHub 上好玩、容易上手的项目,帮你找到编程的乐趣
Investigate malicious Windows logon by visualizing and analyzing Windows event log
本项目是一篇NTLM中高级进阶进阶文章,后续我也会在Github和Gitbook对此文进行持续性的更新NTLM以及常见的协议中高级进阶并计划开源部分协议调试工具,望各位issue勘误。
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
My Pentest tools
A collection of pentest and development tips
📡PoC auto collect from GitHub.
Powershell攻击指南----黑客后渗透之道
Rogue MySql Server
all 4.4 ubuntu aws instances are vulnerable