articles

Fast subdomains enumeration tool for penetration testers

Exploitation for XSS

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

Collection My Wordlist

Windows Exploits

Various PowerShell scripts that may be useful during red team exercise

A collection of random bits of information common to many individual penetration tests, red teams, and other assessments

Slide deck for DefCon Beijing

A list of web application security

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in test…

Red Teaming & Pentesting checklists for various engagements

A framework for wireless pentesting.

Cameradar hacks its way into RTSP videosurveillance cameras

linux-kernel-exploits Linux平台提权漏洞集合

This is a collection of social engineering tricks and payloads being used for credential theft and spear phishing attacks.

Rapid Attack Infrastructure (RAI)

Defeating Windows User Account Control

Windows / Linux Local Privilege Escalation Workshop

Run PowerShell command without invoking powershell.exe

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

Active Directory ACL exploitation with BloodHound

List of Awesome Red Teaming Resources

Various Aggressor Scripts I've Created.

A free but powerful Windows kernel research tool.

awesome list of browser exploitation tutorials

Deploy payloads to *Nix systems en masse

Empire is a PowerShell and Python post-exploitation agent.

List of Awesome Advanced Windows Exploitation References

A collection of various awesome lists for hackers, pentesters and security researchers