x-f1v3 Goto Github PK

pentesting-bible

This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.

poc-exp

收集或编写各种漏洞PoC、ExP

python-paddingoracle

A portable, padding oracle exploit API

revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

robotsdisallowed

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

rogue-mysql-server

MySQL fake server for read files of connected clients

saidict

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shell

自用的shell脚本

somescripts

Some scripts

struts2_vulnerability_environment

Struts2漏洞环境

system

vulnerability_environment

Vulnerability Environment For Webapp

watchdog

Watchdog是bayonet修改版，重新优化了数据库及web及扫描程序,加入多节点

web-hacking-101-zh

:book: [译] Web Hacking 101 中文版

webshell

This is a webshell open source project

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

writeups

x-f1v3.github.io

x-f1v3's Notes

xss.swf

a tiny tool for swf hacking, just browse it:)

ysoserial-cve-2018-2628

Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch