zc00l,github

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

angryorchard

A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-forensics

Awesome Forensics Resources. Almost 300 open source forensics tools, and 600 blog posts about forensics.

bugbounty

Bugbounty Resources

bugid

Detect, analyze and uniquely identify crashes in Windows applications

business-email-compromise-guide

The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Office 365 environment. Each step is intended to guide the process of identifying, collecting and analysing activity associated with BEC intrusions.

certodomain

根据证书报错信息跑域名

container-security-checklist

Checklist for container security - devsecops practices

database

sql injection tools collection

dnsenum

A Subdomain Enumeration Script Designed for Pentesting Reconnaissance

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fancybear

Fancy Bear Source Code

findomain

The complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

gittest

google-10000-english

This repo contains a list of the 10,000 most common English words in order of frequency, as determined by n-gram frequency analysis of the Google's Trillion Word Corpus.