Pinned Repositories
1000php
1000个PHP代码审计案例(2016.7以前乌云公开漏洞)
2book
《Web安全之深度学习实战》
31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
360SafeBrowsergetpass
这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
awesome-osint
:scream: A curated list of amazingly awesome OSINT
Fkbug
练手向
JNDIExploit-2
一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。
Oracle-Pentesting-Reference
Oracle Database Penetration Testing Reference (10g/11g)
redtool
日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种
gkfnf's Repositories
gkfnf/AutoRDPwn
The Shadow Attack Framework
gkfnf/BMJ
Code snippets for bare-metal malware development
gkfnf/BugBountyBooks
A collection of PDF/books about the modern web application security and bug bounty.
gkfnf/Certipy
Tool for Active Directory Certificate Services enumeration and abuse
gkfnf/coder-kung-fu
开发内功修炼
gkfnf/EmailAll
EmailAll is a powerful Email Collect tool
gkfnf/Frame-DefaultPass
所有碰到过的默认口令
gkfnf/fudshell
An efficent Script To Generate FUD Persistent Reverse Shell For Red Teaming. Don't Upload Generated Stub On Virustotal
gkfnf/fuso
一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)
gkfnf/gkfnf.github.io
Blog:
gkfnf/graphql-cop
Security Auditor Utility for GraphQL APIs
gkfnf/heti
赫蹏（hètí）是专为中文内容展示设计的排版样式增强。它基于通行的中文排版规范而来，可以为网站的读者带来更好的文章阅读体验。
gkfnf/InsightEngineering
Hardcore Debugging
gkfnf/KnowledgeBase
Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff
gkfnf/ksubdomain
无状态子域名爆破工具
gkfnf/lihang-code
《统计学习方法》的代码实现
gkfnf/Nimcrypt2
.NET, PE, & Raw Shellcode Packer/Loader Written in Nim
gkfnf/OffensiveNotion
Notion as a platform for offensive operations
gkfnf/OneListForAll
Rockyou for web fuzzing
gkfnf/rs-qq
Rust 模拟QQ客户端协议 已完成 扫码登录/密码登录/获取好友列表/获取群列表/发送群消息/接受群消息。运行src/bin的password_login.rs或qrcode_login.rs体验。重构中（正在努力减少unwrap）
gkfnf/Secure3Academy
gkfnf/SharpSQL
Simple C# implementation of PowerUpSQL
gkfnf/Static-Program-Analysis-Book
Getting started with static program analysis. 静态程序分析入门教程。
gkfnf/the-book-of-secret-knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
gkfnf/trevorc2
TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.
gkfnf/unDefender
Killing your preferred antimalware by abusing native symbolic links and NT paths.
gkfnf/vmprotect-3.5.1
gkfnf/waf-bypass
WAF Bypass Test Tool by Nemesida WAF Team
gkfnf/weaponised-XSS-payloads
XSS payloads designed to turn alert(1) into P1
gkfnf/windows-api-function-cheatsheets
A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.