brucefeiix Goto Github PK

linux-kernel-exploitation

A collection of links related to Linux kernel security and exploitation

medusa

:cat2:Medusa是一个红队武器库平台，目前包括扫描功能、XSS平台、协同平台、CVE监控、免杀生成、DNSLOG等功能，持续开发中 http://medusa.ascotbe.com

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

metasploit-framework

Metasploit Framework

myarticles

蒸米的文章（iOS冰与火之歌系列，一步一步学ROP系列，安卓动态调试七种武器系列等）

myip-fakedns

Fake DNS server answering every query with the IP of the client

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

noxss

Faster xss scanner,support reflected-xss and dom-xss

okadminfinder3

[ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву 👻 (❤-❤) 👻

patchs

patch ext

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

picker

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

pinduoduo_backdoor_detailed_report

Maybe the most detailed analysis of pdd backdoors

programmers-overseas-job-interview-handbook

🏂🏻 程序员海外工作/英文面试手册

pwn_deploy_chroot

可以方便地部署一个或者多个pwn题到一个docker容器中（使用chroot，并可以设置是否使用我自己写的catflag程序替换默认的/bin/sh程序，以增加安全性）

qark

Tool to look for several security related Android application vulnerabilities

qiling

Qiling Advanced Binary Emulation Framework

qrljacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

r0capture

安卓应用层抓包通杀脚本

rails-doubletap-rce

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

rebeacon_src

repsych

Psychological warfare in reverse engineering

ribsnetwork

scanqli

SQLi scanner to detect SQL vulns

security_w1k1

大手子们要是使用过后，能给菜鸡弟弟在Issues反馈个用后体验，那就真的是万分感激了。你一赞，我一赞，年薪百万不停转。

shellphish

Shellphish is created by TheLinuxChoice but after the repository deleted we recreate this. To know how to use shellphish visit our website.

shellphish-1

An Official Re-Upload Of The ShellPhish Tool In Github