Stars
A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.
Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions
lua waf,nginx+lua,openresty,luajit,waf+,cdn,nginx
《Golang学习资源大全-只有Go语言才能改变世界》Only Golang Can Change The World.
PoC Implementation of a fully dynamic call stack spoofer
[WIP] 整理过去的分享,从零开始的Kubernetes攻防 🧐
Machinery is an asynchronous task queue/job queue based on distributed message passing.
scalpel是一款命令行漏洞扫描工具,支持深度参数注入,拥有一个强大的数据解析和变异算法,可以将常见的数据格式(json, xml, form等)解析为树结构,然后根据poc中的规则,对树进行变异,包括对叶子节点和树结构 的变异。变异完成之后,将树结构还原为原始的数据格式。
A curated list of various bug bounty tools
A complete computer science study plan to become a software engineer.
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
A modern 64-bit position independent implant template
A industry-leading free, high-performance, AI and semantic technology web application and API security protection product - uuWAF. 一款工业级免费、高性能、高扩展,支持AI和语义引擎的Web应用和API安全防护产品-南墙。Web应用防火墙、WAF、WAAP
NSIS封包exe,牛牛安装包界面美化控件 [nsNiuniuSkin],包含3个实例,后两个是官网的,helloworld那个是根据上面两个例子改的。
Russia / Ukraine 2022 conflict related IOCs from CERT Orange Cyberdefense Threat Intelligence Datalake
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
🎮 A list of popular/awesome video games, add-ons, maps, etc. hosted on GitHub. Any genre. Any platform. Any engine.
一款基于各大企业信息API的工具,解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。
PE Injection、DLL Injection、Process Injection、Thread Injection、Code Injection、Shellcode Injection、ELF Injection、Dylib Injection, including 400+Tools and 350+posts
A repository that maps commonly used attacks using MSRPC protocols to ATT&CK
Java Agent memory horse scanner combined with Call Graph modus
GoFound GoLang Full text search go语言全文检索引擎,毫秒级查询。 使用http接口调用,集成Admin管理界面,任何系统都可以使用。