x-f1v3 Goto Github PK

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesomexss

Awesome XSS stuff

behinder_source

冰蝎的源码（Decompile & Fixed）

bypass403

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cobaltstrike

CobaltStrike's source code

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

cve-2019-3396

Confluence Widget Connector path traversal (CVE-2019-3396)

fastjson-jdbcrowsetimpl-rce

JNDI加载RMIServer，对FastJson的反序列化攻击，附漏洞环境 & 利用Exp。护网杯CTF比赛原型题目“easy_web”。

forcve

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gofinger

指纹识别工具

hackbar

HackBar plugin for Burpsuite v1.0

java_deserialize_vulnerability_learnning

Java Deserialize Vulnerability Learnning

java_vulnerability_code_demo

DEMO

knock

Knock Subdomain Scan

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

linux

linux安全检查

marshalsec

memshell

micro8

mjet

MOGWAI LABS JMX exploitation toolkit

mypapers

Repository for hosting my research papers

open-multiple-urls

Browser extension for opening lists of URLs

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF