awakerrday Goto Github PK

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

awesome-browser-exploit

awesome list of browser exploitation tutorials

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

corstest

A simple CORS misconfiguration scanner

crackmapexec

A swiss army knife for pentesting networks

cve-2020-14882

CVE-2020–14882、CVE-2020–14883

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

impacket

Impacket is a collection of Python classes for working with network protocols.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poc-in-github

📡 PoC auto collect from GitHub.

pocs

Proof of Concepts for CVE-2016–3714

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

spring-boot-vulnerability

trickest_cve

Gather and update all available and newest CVEs with their PoC.

uxss-db

🔪Browser logic vulnerabilities :skull_and_crossbones:

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

webshell

This is a webshell open source project