bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

cajviewer-lpe-exploit

chybeta

chybeta

chybeta.github.io

cmspoc

CMS渗透测试框架-A CMS Exploit Framework

code-audit-challenges

Code-Audit-Challenges

cve-2017-11427-demo

The Demo for CVE-2017-11427

cve-2018-1000006-demo

The Demo for CVE-2018-1000006

cve-2018-11235-demo

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

exploits

Miscellaneous exploit code

f-nascan

Scanning a network asset information script

hackbar

HackBar plugin for Burpsuite v1.0

hacker101

Hacker101

kibana

Your window into the Elastic Stack

linuxcourse

mind-map

各种安全相关思维导图整理收集

oddproxydemo

php_bugs

PHP代码审计分段讲解

poc

poc from bugscan beebeeto

poc-exp

poc or exp of android vulnerability

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

pyblog

A blog based on flask

requests

Python HTTP Requests for Humans™ ✨🍰✨

security_circle_2017

shadowbroker

The Shadow Brokers "Lost In Translation" leak

sigma

Generic Signature Format for SIEM Systems

software-security-learning

Software-Security-Learning

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

tomcat-cluster-session-sync-exp

tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484是session持久化的洞，这个是session集群同步的洞！