基于 .NET Core MVC 的权限管理系统，代码易读易懂、界面简洁美观

A simple stiller with sending logs to your EMAIL, in case of inactivity, write to me in Discord- R3VENGE#1539

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

漏洞批量验证框架

A small POC to make defender useless by removing its token privileges and lowering the token integrity

A collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

CVE-2022-0543_RCE,Redis Lua沙盒绕过 命令执行

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞…

Sysmon configuration file template with default high-quality event tracing

With the help of this automated script, you will never lose track of recently released CVEs.

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

渗透测试报告辅助生成工具

收集的文章

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by…

视频字幕实时翻译插件 - 需配合谷歌翻译

Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.

Exploits targeting Symfony

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

Remote Code Execution exploit on TVT DVR

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as wel…

反弹Shell命令一键生成