vanirxxx Goto Github PK

argumentinjectionhammer

A Burp Extension designed to identify argument injection vulnerabilities.

awesome-aws-security

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-web3-security

A curated list of web3Security materials and resources For Pentesters and Bug Hunters.

burpsuite-pro-installation

😁 BurpSuite Pro Auto Installation Script For Linux And Windows! 👍

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

challenges_2022_public

Files + Writeups for DownUnderCTF 2022 Challenges

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

exploits

Pwn stuff.

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

go

The Go programming language

idol-ctf-challenges

a repository of all the CTF challenges I've made for public events

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javasec

a rep for documenting my study, may be from 0 to 0.1

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

my-ctf-challenges

nodejs-red-team-cheat-sheet

NodeJS Red-Team Cheat Sheet

osce-complete-guide

OSWE, OSEP, OSED

pickora

A toy compiler that can convert Python scripts 🐍 to pickle bytecode 🥒

pker

Automatically converts Python source code to Pickle opcode

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

rips

RIPS - A static source code analyser for vulnerabilities in PHP scripts

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

unzipper

Small class to extract + compress .zip, .gz, .rar archives via browser.

uri-schemes-wordlist

Wordlist used while bruteforcing/fuzzing schemes in XXE,SSRF, LFI, etc.

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

web-ctf-cheatsheet

Web CTF CheatSheet 🐈