Stars
新一代SKRoot,挑战全网root检测手段,跟面具完全不同思路,摆脱面具被检测的弱点,完美隐藏root功能,全程不需要暂停SELinux,实现真正的SELinux 0%触碰,通用性强,通杀所有内核,不需要内核源码,直接patch内核,兼容安卓APP直接JNI调用,稳定、流畅、不闪退。
Vim-fork focused on extensibility and usability
Tips and Tutorials for Bug Bounty and also Penetration Tests.
Update Xray1.9.11 Cracked for Windows,Linux and Mac OS.
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…
A path-normalization pentesting tool.
List of Google Dorks for sites that have responsible disclosure program / bug bounty program
Find, verify, and analyze leaked credentials
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
😘 让你“爱”上 GitHub,解决访问时图裂、加载慢的问题。(无需安装)
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Gospider - Fast web spider written in Go
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
Top disclosed reports from HackerOne
Check your WAF before an attacker does
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply moni…