Pinned Repositories
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
About-Attack
一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】
api-development-tools
:books: A collection of useful resources for building RESTful HTTP+JSON APIs.
Awesome-RCE-techniques
Awesome list of techniques to achieve Remote Code Execution on various apps!
CVE-2021-31166
Windows HTTP协议栈远程代码执行漏洞 CVE-2021-31166
fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
GoBypass
Golang免杀生成工具
olist213_Information_Security_Books
150本信息安全方面的书籍书籍（持续更新）
open-resume
OpenResume is a powerful open-source resume builder and resume parser. https://open-resume.com/
Spring-Cloud-Gateway-CVE-2022-22947
CVE-2022-22947
afwu's Repositories
afwu/gitlab-exploit
GitLab CVE-2023-7028
afwu/nuclei-templates
Community curated list of templates for the nuclei engine to find a security vulnerability in application.
afwu/rsk-powhsm
Special purpose PowHSM firmware for the RSK PowPeg.
afwu/3proxy
3proxy - tiny free proxy server
afwu/Autoscanner
输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等
afwu/boopkit
Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
afwu/CVE-2024-23897
This repository presents a proof-of-concept of CVE-2024-23897
afwu/darknavysecurity.github.io
afwu/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
afwu/domain_scan
afwu/ebpf_shell
ebpf WebShell/内核马，一种新型内核马/WebShell技术
afwu/edwordzpeng-presentations
afwu/ehids-agent
A Linux Host-based Intrusion Detection System based on eBPF.
afwu/fingerprintx
Standalone utility for service discovery on open ports!
afwu/hppt
一款基于纯HTTP协议的内网穿透、反向代理工具
afwu/jar-analyzerv2
Jar Analyzer Project
afwu/libwebp-checker
A tool for finding vulnerable libwebp(CVE-2023-4863)
afwu/linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
afwu/live
✯ 一个国内可直连的直播源分享项目 ✯ 🔕 永久免费 直连访问 完整开源 不含广告 完善的台标 直播源支持IPv4/IPv6双栈访问 🔕
afwu/log4shell
Operational information regarding the vulnerability in the Log4j logging library.
afwu/pandora
A red team tool that assists into extracting/dumping master credentials and/or enties from different password managers
afwu/poc2023-slides
afwu/prismx
:: 棱镜 X · 一体化的轻量型跨平台渗透系统
afwu/qbindiff
Quarkslab Bindiffer but not only !
afwu/RCEFuzzer
一个以fuzz为中心**的被动扫描工具
afwu/singularity
A DNS rebinding attack framework.
afwu/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor
Smart contract audit skills roadmap for beginners, auditors, engineers, etc.
afwu/SpringBoot-Scan
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
afwu/Web3-Security-Library
Information about web3 security and programming tutorials/tools
afwu/wechat-windows-versions
保存微信历史版本