Apache Log4j 远程代码执行

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

Monitors and curates bug-bounty related repositories weekly (Monday).

FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent, VSCode Agent, Dia Browser, Xcode, Trae AI, Cluely & Orchids.app (And other Open Sourced) System Prompts, Tools & AI M…

Abuse trust-boundaries to bypass firewalls and network controls

A fast, minimalistic scanner for time-based SQL injection (SQLi) detection – built in Go.

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Awesome Pentest Tools Collection

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

List of Github repositories and articles with list of dorks for different search engines

Tools and Techniques for Red Team / Penetration Testing

Repository to house markdown templates for researchers

OSINT automation for hackers.

Recon MindMap (RMM)

A mind map, outline and pdf annotate tool for obsidian,It support mobile and desktop

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

A collection of impressive and useful results from OpenAI's chatgpt

Windows Exploit Suggester - Next Generation

Awesome Cybersecurity Conferences - Watch the latest awesome security talks around the globe

Best practices for segmentation of the corporate network of any company