sanwenkit Goto Github PK

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

jscep

A Java implementation of the Simple Certificate Enrolment Protocol

labs

Vulnerability Labs for security analysis

laravel-src

基于 LARAVEL 打造的安全应急响应中心平台

lazydocker

The lazier way to manage everything docker

libest

linux

Linux kernel source tree

linux-kernel-exploitation

A bunch of links related to Linux kernel fuzzing and exploitation

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

littl_tools

lua-resty-redis

Lua redis client driver for the ngx_lua based on the cosocket API

mazda_getinfo

A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

micro8

mimikatz

A little tool to play with Windows security

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

nagascan

NagaScan is a distributed passive scanner for Web application.

opcde

OPCDE DXB 2017 Materials

openvas-docker

A Docker container for Openvas

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

parameth

This tool can be used to brute discover GET and POST parameters

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

pentest-guide

Penetration tests cases, resources and guidelines.

pentest_study

从零开始内网渗透学习

pki.js

PKIjs is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.

poc-exp

poc or exp of android vulnerability

poc-t

渗透测试插件化并发框架

post-exploitation

Post Exploitation Collection

pth-toolkit

Modified version of the passing-the-hash tool collection (https://code.google.com/p/passing-the-hash/) made to work straight out of the box

punkspider