Lists (2)
Starred repositories
一款基于污点分析的PHP扫描工具，能快速匹配从常见Source点如$_POST、$GET到Sink点system等的路径，同时支持单独对函数的扫描。
The tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.
An open Apple AirDrop implementation written in Python
A tiling window manager for macOS based on binary space partitioning
Expose local http, tcp or websocket connections to the public internet
A lightweight screen recorder based on ScreenCapture Kit for macOS / 基于 ScreenCapture Kit 的轻量化多功能 macOS 录屏工具
A clipboard synchronization service for different devices that can synchronize text, screenshots, and files.
Unlock your displays on your Mac! Flexible HiDPI scaling, XDR/HDR extra brightness, virtual screens, DDC control, extra dimming, PIP/streaming, EDID override and lots more!
An inject tools for injecting js code into electron application
Reverse Engineering: Decompiling Binary Code with Large Language Models
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。
FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用
Chunking CobaltStrike Payloads + Jump Method
CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839
ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!
This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to …
This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.
This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.
This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to …
https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
This repo contains some Amsi Bypass methods i found on different Blog Posts.