w0lfzhang's Stars
projectzeroindia/CVE-2019-11510
Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
jbaines-r7/cisco_asa_research
Cisco ASA Software and ASDM Security Research
c0ny1/upload-labs
一个想帮你总结所有类型的上传漏洞的靶场
PalindromeLabs/awesome-websocket-security
Awesome information for WebSockets security research
blackfuel/asuswrt-mod-kit
Firmware rebuild tool for Asus ARM routers.
p0dalirius/Awesome-RCE-techniques
Awesome list of step by step techniques to achieve Remote Code Execution on various apps!
blackhatethicalhacking/CVE-2020-2034-POC
Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal
h0mbre/CTP-OSCE
Scripts I used during CTP
rofl0r/microsocks
tiny, portable SOCKS5 server with very moderate resource usage
chaitin/xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
mufeedvh/moonwalk
Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
nccgroup/BurpSuiteHTTPSmuggler
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
pr0v3rbs/FirmAE
Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
waderwu/extractor-java
CodeQL extractor for java, which don't need to compile java source
wagiro/BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
gojue/ecapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
hongriSec/PHP-Audit-Labs
一个关于PHP的代码审计项目
threedr3am/learnjavabug
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
berdav/CVE-2021-4034
CVE-2021-4034 1day
microsoft/restler-fuzzer
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
hugsy/gdb-static
Public repository of statically compiled GDB and GDBServer
jbaines-r7/badblood
SonicWall SMA-100 Unauth RCE Exploit (CVE-2021-20038)
harsh-bothra/SecurityExplained
SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.
gaffe23/linux-inject
Tool for injecting a shared object into a Linux process
sindresorhus/awesome
😎 Awesome lists about all kinds of interesting topics
JakobTheDev/awesome-devsecops
Curating the best DevSecOps resources and tooling.
firefart/dirtycow
Dirty Cow exploit - CVE-2016-5195
iiiusky/java_rasp_example
ATNX/javaweb-rasp
mbechler/marshalsec