Azure Security Resources and Notes

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

Wiki to collect Red Team infrastructure hardening resources

zone-h scraper

This is the leaked code - verifying needed

Credentials gathering tool automating remote procdump and parse of lsass process.

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

This repository is primarily maintained by Omar Santos and includes resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability researc…

😎 Awesome lists about all kinds of interesting topics

OSINT Framework

People tracker on the Internet: Learn to track the world, to avoid being traced.

Wordpress Attack Suite

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

the only cheat sheet you need

cheat.sh cheat sheets repository

The Shadow Brokers "Lost In Translation" leak

ezXSS is an easy way to test (blind) XSS

List of XSS Vectors/Payloads

Useful resources for iOS hacking

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

This is a webshell open source project

Run Internet Explorer 8/9/10/11/MS-Edge Virtual machines from Microsoft under Linux via VirtualBox.

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

Legal, procedural and policies document templates for operating an IRT

Various snippets created during malware analysis