fastjson-payload

Fastjson 反序列化

frida-ios-dump

pull decrypted ipa from jailbreak device

frida-scripts

A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gensim-doc-zh

gensim 中文文档

githack

A `.git` folder disclosure exploit

go-eth-read

grafana-ssrf

Authenticated SSRF in Grafana

hack-for-tools

常用的黑客神器

heartbleedbug

heartbleed bug adalah sebuah kerentanan yang ada pada OPENSSL yang dapat tercurinya cookie admin dan banyak lagi

huxpro.github.io

My Blog / Jekyll Themes / PWA

idea_exploit

Gather sensitive information from (.idea) folder for pentesters

iis_analysis

information_collect_tool

子域名后续的信息收集工具

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

j3ssie

jenkins_unauthenticated_remote_code_execution

Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

ksubdomain

无状态子域名爆破工具

ldbfpiaoran

ldbfpiaoran.github.io

learn-python3

Learn Python 3 Sample Code

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

mhzx

mobile-security-framework-mobsf

增加自定义安卓扫描规则 仓库

monitor_domain

分布式子域名监控工具

mrq

Mr. Queue - A distributed worker task queue in Python using Redis & gevent

muchener.github.io

blogs

mxtract

mXtract - Memory Extractor & Analyzer

my-frida

myblog

myblog